Threats tagged 'ghsa-596c-w2jc-jmmx'

A critical vulnerability in ClamAV's PDF scanning process allows unauthenticated remote attackers to cause a buffer overflow. This can lead to denial of service (DoS) by crashing the scanning process or potentially enable arbitrary code execution with the privileges of the ClamAV process. The flaw arises from incorrect memory buffer allocation when processing PDF files. Exploitation involves submitting a crafted PDF file to the scanner. No confirmed exploits in the wild are reported, and no affected versions or patches are specified.