CVE-2025-20260

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-20260
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-20260.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-20260
Downstream
Related
Published
2025-06-18T18:15:23Z
Modified
2025-08-12T12:08:12.886008Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condition, or execute arbitrary code on an affected device.

This vulnerability exists because memory buffers are allocated incorrectly when PDF files are processed. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to trigger a buffer overflow, likely resulting in the termination of the ClamAV scanning process and a DoS condition on the affected software. Although unproven, there is also a possibility that an attacker could leverage the buffer overflow to execute arbitrary code with the privileges of the ClamAV process.

References

Affected packages

Debian:11 / clamav

Package

Name
clamav
Purl
pkg:deb/debian/clamav?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.103.2+dfsg-2
0.103.3+dfsg-0+deb11u1
0.103.3+dfsg-1
0.103.4+dfsg-0+deb11u1
0.103.4+dfsg-1
0.103.5+dfsg-0+deb11u1
0.103.5+dfsg-1
0.103.6+dfsg-0+deb11u1
0.103.6+dfsg-1
0.103.7+dfsg-0+deb11u1
0.103.7+dfsg-1
0.103.8+dfsg-0+deb11u1
0.103.9+dfsg-0+deb11u1
0.103.10+dfsg-0+deb11u1

1.*

1.0.0+dfsg-1
1.0.0+dfsg-2
1.0.0+dfsg-3
1.0.0+dfsg-4
1.0.0+dfsg-5
1.0.0+dfsg-6
1.0.1+dfsg-1
1.0.1+dfsg-2
1.0.2+dfsg-1~deb12u1
1.0.2+dfsg-1
1.0.3+dfsg-1~deb12u1
1.0.3+dfsg-1
1.0.3+dfsg-2
1.0.4+dfsg-1
1.0.5+dfsg-1~deb12u1
1.0.5+dfsg-1
1.0.5+dfsg-1.1
1.0.6+dfsg-1
1.0.7+dfsg-1~deb11u1
1.0.7+dfsg-1~deb11u2
1.0.7+dfsg-1~deb12u1
1.0.9+dfsg-1~deb12u1
1.2.1+dfsg-1
1.2.1+dfsg-2
1.2.1+dfsg-3
1.3.1+dfsg-1
1.3.1+dfsg-2
1.3.1+dfsg-3
1.3.1+dfsg-4
1.3.1+dfsg-5
1.4.1+dfsg-1
1.4.2+dfsg-1
1.4.3+dfsg-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / clamav

Package

Name
clamav
Purl
pkg:deb/debian/clamav?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.0.1+dfsg-2
1.0.2+dfsg-1~deb12u1
1.0.2+dfsg-1
1.0.3+dfsg-1~deb12u1
1.0.3+dfsg-1
1.0.3+dfsg-2
1.0.4+dfsg-1
1.0.5+dfsg-1~deb12u1
1.0.5+dfsg-1
1.0.5+dfsg-1.1
1.0.6+dfsg-1
1.0.7+dfsg-1~deb11u1
1.0.7+dfsg-1~deb11u2
1.0.7+dfsg-1~deb12u1
1.0.9+dfsg-1~deb12u1
1.2.1+dfsg-1
1.2.1+dfsg-2
1.2.1+dfsg-3
1.3.1+dfsg-1
1.3.1+dfsg-2
1.3.1+dfsg-3
1.3.1+dfsg-4
1.3.1+dfsg-5
1.4.1+dfsg-1
1.4.2+dfsg-1
1.4.3+dfsg-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / clamav

Package

Name
clamav
Purl
pkg:deb/debian/clamav?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:14 / clamav

Package

Name
clamav
Purl
pkg:deb/debian/clamav?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.3+dfsg-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/cisco-talos/clamav

Affected ranges

Type
GIT
Repo
https://github.com/cisco-talos/clamav
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
5d78e4e470a361ac8378582ad15df39a54724856

Affected versions

clamav-0.*

clamav-0.101.0
clamav-0.102.0
clamav-0.103.0
clamav-0.103.0-rc
clamav-0.103.0-rc2
clamav-0.105.0
clamav-0.105.0-rc
clamav-0.105.0-rc2
clamav-0.96
clamav-0.96.2
clamav-0.96.3
clamav-0.96.4
clamav-0.96.5
clamav-0.96rc1
clamav-0.96rc2
clamav-0.97
clamav-0.97rc
clamav-0.98-dmgxar
clamav-0.99-beta1

clamav-1.*

clamav-1.0.0
clamav-1.0.0-rc
clamav-1.0.0-rc2
clamav-1.0.1
clamav-1.0.2
clamav-1.0.3
clamav-1.0.4
clamav-1.0.5
clamav-1.0.6
clamav-1.0.7
clamav-1.0.8

Other

merge-llvm-79908
merge-llvm-80601
merge-llvm-83242
merge-llvm-90002
merge-llvm-91214
merge-llvm-91428
merge-llvm-92222
merge-llvm-94539
merge-llvm-97877
r5076