The vulnerability in ClamAV's Mach-O file format parser arises from improper boundary checks when processing Mach-O files. An attacker can exploit this by submitting a specially crafted Mach-O file to ClamAV, causing an out-of-bounds buffer read. This memory corruption can cause the ClamAV scanning process to crash, resulting in a denial-of-service condition. The vulnerability does not require authentication and can be triggered remotely during file scanning. There is no indication of other impacts such as code execution in the provided data.

Successful exploitation leads to a denial-of-service condition by crashing the ClamAV scanning process. There is no confirmed impact on confidentiality or integrity. The vulnerability affects availability of the scanning service on affected devices.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid scanning untrusted Mach-O files or implement additional file validation controls if possible.