Clam antivirus

This hub aggregates every CVE we track for Clam antivirus, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Clam antivirus.

• CVE-2020-37167ClamAV ClamBC < 0.103.0-rc - 'ClamBC' Executable Regular Expression Error8.4Feb 12, 2026
• CVE-2025-20260ClamAV PDF Scanning Buffer Overflow Vulnerability9.8Jun 18, 2025
• CVE-2025-20128ClamAV OLE2 File Format Decryption Denial of Service Vulnerability5.3Jan 22, 2025
• CVE-2024-20506ClamAV Privilege Handling Escalation Vulnerability6.1Sep 4, 2024
• CVE-2024-20505ClamAV Memory Handling DoS4.0Sep 4, 2024
• CVE-2024-20380ClamAV HTML Parser Denial of Service Vulnerability7.5Apr 18, 2024
• CVE-2024-20328ClamAV VirusEvent File Processing Command Injection Vulnerability5.3Mar 1, 2024
• CVE-2024-20290A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is...7.5Feb 7, 2024
• CVE-2022-20803ClamAV Double-free Vulnerability in the OLE2 File Parser8.6Feb 17, 2023
• CVE-2023-20052On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and...5.3Feb 16, 2023
• CVE-2023-20032On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and e...9.8Feb 16, 2023
• CVE-2022-20792A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an ...7.8Aug 10, 2022
• CVE-2022-20796ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 20226.5May 4, 2022
• CVE-2022-20785ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 20227.5May 4, 2022
• CVE-2022-20771ClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 20227.5May 4, 2022