Memory Exhaustion Vulnerability in Trend Micro Virus Scan API and Advanced Threat Scan Engine

CVE-2021-25252

Summary

The Virus Scan API and Advanced Threat Scan Engine by Trend Micro are susceptible to a memory exhaustion vulnerability. When exploited, an attacker can craft a malicious file that leads to system freeze or denial-of-service, severely disrupting operations. Organizations using these products are advised to assess their systems for this vulnerability and implement necessary safeguards to prevent potential exploitation.

References