This vulnerability arises from improper boundary checks in the DMG file format parser used by ClamAV within Cisco Secure Endpoint. Specifically, an integer overflow on 32-bit platforms can occur when scanning crafted DMG files, leading to memory corruption and a potential denial-of-service by crashing the scanning process. The vulnerability affects multiple explicit versions of Cisco Secure Endpoint as listed. The CVSS 3.1 base score is 7.5, reflecting a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability.

An unauthenticated remote attacker can cause the ClamAV scanning process in Cisco Secure Endpoint to crash by submitting a specially crafted DMG file. This results in a denial-of-service condition, disrupting malware scanning and potentially reducing endpoint protection effectiveness. There is no confirmed impact on confidentiality or integrity, and no known exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when scanning untrusted DMG files and monitor for updates from Cisco regarding patches or mitigations.