OSV-2025-512

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/clamav/OSV-2025-512.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-512
Published
2025-07-03T00:00:40.745577Z
Modified
2025-07-03T00:00:40.746200Z
Summary
Invalid-free in pdf_decodestream
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=428754704

Crash type: Invalid-free
Crash state:
pdf_decodestream
pdf_extract_obj
cli_pdf
References

Affected packages

OSS-Fuzz / clamav

Package

Name
clamav
Purl
pkg:generic/clamav

Affected ranges

Type
GIT
Repo
https://github.com/Cisco-Talos/clamav.git
Events
Introduced
7b9e4f1b4244cbaac4eb6b1234c4a4e26c83b9f7
Fixed
7fab05a89ff668eafc489cd2da920a341bb53759

Affected versions

clamav-1.*
clamav-1.4.3

Ecosystem specific 

{
    "severity": null
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/clamav/OSV-2025-512.yaml"
introduced_range 
"dd033361fc4397e6c21dd5019399971aba6f611a:f963dc2d9e2a3847df7502b42b8f30da08323708"
fixed_range 
"17d0665580a4b3f32a607e7b1c9351a3eefb1fee:7fab05a89ff668eafc489cd2da920a341bb53759"