Known vulnerabilities in clamav

Known vulnerabilities in clamav

Vendor: openEuler

Software: clamav

Software CPE: cpe:2.3:o:openeuler:clamav:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 12

Public exploits: 1

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU111270 - Out-of-bounds write CVE-2025-20260	CWE-787	Critical	No	No	1.0.9-2	18.06.2025	SB2025061842 SB20250620165 SB20250620166 and 13 more
#VU96825 - Out-of-bounds read CVE-2024-20505	CWE-125	Medium	No	No	0.103.12-1	05.09.2024	SB2024090511 SB20240905109 SB20240905110 and 16 more
#VU96824 - UNIX Symbolic Link (Symlink) Following CVE-2024-20506	CWE-61	Low	No	No	0.103.12-1	05.09.2024	SB2024090511 SB20240905109 SB20240905110 and 13 more
#VU79633 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-20197	CWE-835	Medium	No	No	0.103.9-1	16.08.2023	SB20230816163 SB20230821217 SB20230821218 and 21 more
#VU72298 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-20052	CWE-611	Medium	Available	No	0.103.8-1	15.02.2023	SB2023021569 SB2023021570 SB2023022043 and 17 more
#VU72297 - Heap-based Buffer Overflow CVE-2023-20032	CWE-122	Critical	No	No	0.103.8-1	15.02.2023	SB2023021569 SB2023021570 SB2023022043 and 18 more
#VU62803 - Heap-based Buffer Overflow CVE-2022-20792	CWE-122	High	No	No	0.103.6-3	04.05.2022	SB2022050437 SB2022051732 SB2022051836 and 4 more
#VU62802 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-20771	CWE-835	Medium	No	No	0.103.6-3	04.05.2022	SB2022050437 SB2022051732 SB2022051836 and 14 more
#VU62800 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-20770	CWE-835	Medium	No	No	0.103.6-3	04.05.2022	SB2022050437 SB2022051732 SB2022051836 and 14 more
#VU62798 - Missing release of memory after effective lifetime CVE-2022-20785	CWE-401	Medium	No	No	0.103.6-3	04.05.2022	SB2022050437 SB2022051732 SB2022051836 and 13 more
#VU59832 - Improper input validation CVE-2022-20698	CWE-20	Medium	No	No	0.103.2-4	19.01.2022	SB2022011924 SB2022011853 SB2022011955 and 8 more
#VU23559 - Improper input validation CVE-2019-15961	CWE-20	Medium	No	No	0.101.4-9	12.12.2019	SB2019121205 SB2019121208 SB2020010817 and 11 more