This vulnerability arises from improper boundary checks in the Mach-O file parser component of ClamAV integrated into Cisco Secure Endpoint. An attacker can exploit this by submitting a specially crafted Mach-O file to be scanned, triggering an out-of-bounds buffer read. This memory corruption can cause the scanning process to terminate unexpectedly, resulting in a denial-of-service condition. The vulnerability affects multiple specific versions of Cisco Secure Endpoint as listed. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

Successful exploitation results in denial of service by causing the ClamAV scanning process to crash, potentially disrupting endpoint protection services. There is no indication of confidentiality or integrity impact. The vulnerability requires no privileges and no user interaction, making it remotely exploitable.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting or monitoring the submission of Mach-O files for scanning if feasible.