Search CVE reports


Toggle filters

1 – 10 of 188 results


CVE-2026-119602

Low priority
Vulnerable

libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP...

2 affected packages

libmspack, clamav

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libmspack Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable
clamav Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2026-110602

Medium priority

Some fixes available 4 of 9

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or...

2 affected packages

libmspack, clamav

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libmspack Fixed Fixed Fixed Needs evaluation Needs evaluation
clamav Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2026-20348

Medium priority

Some fixes available 3 of 7

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This...

1 affected package

clamav

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
clamav Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-20347

Medium priority

Some fixes available 3 of 7

A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an...

1 affected package

clamav

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
clamav Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-20346

Medium priority

Some fixes available 3 of 7

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This...

1 affected package

clamav

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
clamav Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-20345

Medium priority

Some fixes available 3 of 7

A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This...

1 affected package

clamav

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
clamav Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-20339

Medium priority

Some fixes available 3 of 7

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an...

1 affected package

clamav

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
clamav Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-20338

Medium priority

Some fixes available 3 of 7

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper memory handling when processing content in...

1 affected package

clamav

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
clamav Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-20337

Medium priority

Some fixes available 3 of 7

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper boundary checks for content in zip files...

1 affected package

clamav

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
clamav Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2026-20244

Medium priority

Some fixes available 3 of 8

A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This...

1 affected package

clamav

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
clamav Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages