CVE-2026-20346
Received Received - Intake

Memory Corruption in ClamAV PDF Parser

Publication date: 2026-08-07

Last updated on: 2026-08-07

Assigner: Cisco Systems, Inc.

Description
A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-07
Last Modified
2026-08-07
Generated
2026-08-07
AI Q&A
2026-08-07
EPSS Evaluated
N/A
NVD
CVE-2026-20346
EUVD
EUVD-2026-54530

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
clamav clamav *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in ClamAV's PDF file format parser. It occurs due to improper boundary checks when scanning PDF files, leading to an out-of-bounds buffer read. An attacker can exploit this by submitting a specially crafted PDF file to be scanned by ClamAV on an affected device.

Detection Guidance

This vulnerability can be detected by checking the version of ClamAV installed on your system. Use the command 'clamav --version' to verify if your version is affected. Ensure your ClamAV definitions are up to date with 'freshclam' to detect known malicious PDF files.

Impact Analysis

This vulnerability could allow an attacker to cause a denial-of-service (DoS) condition on the affected device by terminating the ClamAV scanning process. This may disrupt security scanning operations and potentially allow malicious content to go undetected.

Compliance Impact

This vulnerability could impact compliance by causing disruptions in security scanning processes, potentially leading to unscanned files or delayed threat detection. However, the provided text does not specify direct effects on GDPR or HIPAA compliance.

Mitigation Strategies

Update ClamAV to the latest version immediately. Disable PDF file scanning temporarily if possible, or restrict scanning to trusted sources. Monitor system logs for unusual activity related to ClamAV processes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-20346. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart