CVE-2026-20337: ClamAV ZIP File Format Processing Memory Corruption Vulnerability
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.
Other sources
ClamAV ZIP File Format Processing Memory Corruption Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.5.4-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20337?
The severity of CVE-2026-20337 is rated high with a score of 7.5.
How do I fix CVE-2026-20337?
To fix CVE-2026-20337, update ClamAV to the latest version that addresses this zip file processing vulnerability.
What type of vulnerability is CVE-2026-20337?
CVE-2026-20337 is a memory corruption vulnerability specifically related to the zip archive parser in ClamAV.
Can CVE-2026-20337 be exploited remotely?
Yes, CVE-2026-20337 can be exploited remotely by an unauthenticated attacker.
What does CVE-2026-20337 allow an attacker to do?
CVE-2026-20337 allows an attacker to cause a denial of service (DoS) condition on an affected device.