A malformed xar file can cause an out of bounds heap read in clamav.
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2017-0363.json"