This vulnerability arises from improper boundary checks in the PDF parser component of ClamAV integrated into Cisco Secure Endpoint. Specifically, crafted PDF files can trigger an out-of-bounds buffer read during scanning, leading to memory corruption. The primary impact is a denial-of-service condition caused by termination of the scanning process. The vulnerability requires no privileges and no user interaction, and can be triggered remotely by submitting malicious PDF files for scanning. The CVSS v3.1 base score is 7.5, reflecting high severity due to the ease of exploitation and impact on availability. Affected versions include a wide range of Cisco Secure Endpoint releases explicitly enumerated in the input data. No patch or remediation details are provided in the source data.

Successful exploitation results in denial of service by terminating the ClamAV scanning process on affected Cisco Secure Endpoint devices. There is no indication of confidentiality or integrity compromise. The vulnerability can be triggered remotely without authentication or user interaction, potentially disrupting endpoint security scanning operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is indicated in the provided data, users should monitor Cisco's security advisories for updates. Until a patch is available, consider restricting or monitoring the submission of PDF files for scanning if feasible to reduce exposure.