Buffer Overflow Vulnerability in ClamAV's PDF Scanning Processes

CVE-2025-20260

What is CVE-2025-20260?

A significant vulnerability found in the PDF scanning capabilities of ClamAV allows remote, unauthenticated attackers to exploit improperly allocated memory buffers. By submitting a specially crafted PDF for scanning, attackers may cause a buffer overflow that could disrupt the ClamAV service, potentially leading to a denial of service. There exists a theoretical risk that the same vulnerability could be leveraged to execute arbitrary code with the permissions of the ClamAV process, heightening the overall security risk.

References