This vulnerability affects the PE file format parser component of ClamAV integrated within Cisco Secure Endpoint. Due to improper boundary checks on PE file content during scanning, an attacker can submit a maliciously crafted PE file that causes an out-of-bounds buffer write. This memory corruption leads to termination of the ClamAV scanning process, resulting in a denial-of-service condition. The vulnerability does not require authentication and has no described impact on confidentiality or integrity. The CVSS 3.1 base score is 7.5, reflecting a high severity denial-of-service impact with network attack vector and low attack complexity. No vendor advisory or patch information is currently available to confirm remediation status.

Successful exploitation causes the ClamAV scanning process within Cisco Secure Endpoint to terminate unexpectedly, resulting in a denial-of-service condition. There is no confirmed impact on data confidentiality or integrity. The vulnerability can be triggered remotely without authentication by submitting crafted PE files for scanning.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting or validating PE file inputs to the scanning process to reduce exposure to crafted files. Monitor vendor communications for updates on patches or mitigations.