This vulnerability arises from improper boundary checks in the PE file format parser of ClamAV integrated within Cisco Secure Endpoint. The flaw allows an attacker to submit a maliciously crafted PE file that causes an out-of-bounds buffer write during scanning. This memory corruption leads to termination of the scanning process, resulting in a denial-of-service condition. The vulnerability does not require authentication and can be triggered remotely. No known exploits are reported in the wild, and no official fix or patch has been confirmed as of the published date.

Exploitation of this vulnerability results in a denial-of-service condition by causing the ClamAV scanning process within Cisco Secure Endpoint to terminate unexpectedly. There is no confirmed impact on confidentiality or integrity according to the available data. The vulnerability affects availability of the scanning service, potentially reducing endpoint protection effectiveness during the DoS condition.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is indicated, users should monitor Cisco advisories for updates. Until a patch is available, consider restricting exposure of the scanning service to untrusted inputs or applying compensating controls as recommended by Cisco once available.