Buffer Overflow Vulnerability in ClamAV's FSG File Format Parser

CVE-2026-20214

What is CVE-2026-20214?

A vulnerability in ClamAV's FSG file format parser presents a potential security risk whereby an unauthenticated remote attacker can exploit improper boundary checks. This vulnerability allows for an out-of-bounds buffer write when crafted FSG files containing portable executable content are scanned. If successfully exploited, an attacker may lead the ClamAV scanning process to terminate, resulting in a denial-of-service condition on the affected systems. Prompt attention is necessary to mitigate these risks and ensure continued protection against unauthorized access and operational disruptions.

References