Skip to main content
VulnerabilityPublished Updated

fp_cmp_mag · Clamav: UNKNOWN READ

Affects clamavSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 9 Aug 2026, 18:08 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzclamavpkg:generic/clamavOther threatsAffected
  • >=375ecf678c714623e6fb5c0119d1bec98dc700dd
  • =clamav-0.105.0
  • =clamav-0.105.0-rc
  • =clamav-0.105.0-rc2
  • =clamav-0.105.1
  • =clamav-1.0.0-rc
  • =clamav-1.0.0-rc2
  • =clamav-1.0.0
  • =clamav-0.105.2
  • =clamav-1.0.1
  • =clamav-1.1.0-rc
  • =clamav-1.1.0
  • =clamav-1.2.0-rc
  • =clamav-1.0.2
  • =clamav-1.1.1
  • =clamav-1.0.3
  • =clamav-1.1.2
  • =clamav-1.2.0
  • =clamav-1.0.4
  • =clamav-1.1.3
  • =clamav-1.2.1
  • =clamav-1.3.0-rc
  • =clamav-1.3.0-rc2
  • =clamav-1.0.5
  • =clamav-1.2.2
  • =clamav-1.3.0
  • =clamav-1.0.6
  • =clamav-1.2.3
  • =clamav-1.3.1
  • =clamav-1.4.0-rc
  • =clamav-1.4.0
  • =clamav-1.0.7
  • =clamav-1.3.2
  • =clamav-1.4.1
  • =clamav-1.0.8
  • =clamav-1.4.2
  • =clamav-1.5.0-beta
  • =clamav-1.0.9
  • =clamav-1.4.3
  • =clamav-1.5.0-rc
  • =clamav-1.5.0
  • =clamav-1.5.1
  • =clamav-1.4.4
  • =clamav-1.5.2
  • =clamav-1.4.5
  • =clamav-1.5.3
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until an official fix is released, users should monitor updates from ClamAV and OSS-Fuzz. No specific mitigation steps are provided in the available data.

Description

A memory safety issue was identified in ClamAV related to an UNKNOWN READ crash occurring in the function fp_cmp_mag, as reported by OSS-Fuzz. This crash involves the functions fp_cmp_mag, crtmgr_trust_list_lookup, and crtmgr_add. The vulnerability affects versions of ClamAV starting from commit 375ecf678c714623e6fb5c0119d1bec98dc700dd. No CVSS score or detailed impact analysis is available, and there is no information about active exploitation or an official patch.

References

Community reviews

Loading reviews…