Threats tagged 'ghsa-6qcx-p3rr-pfwf'

CVE-2024-20505 is a medium severity vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) affecting multiple versions including 1.4.0, 1.3.2, all 1.2.x, 1.0.6 and prior, all 0.105.x, 0.104.x, and 0.103.11 and earlier. It allows an unauthenticated remote attacker to cause a denial of service (DoS) by submitting a crafted PDF file that triggers an out-of-bounds read, terminating the scanning process.