CVE-2026-20339: ClamAV PESpin File Format Processing Integer Overflow Vulnerability
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Other sources
ClamAV PESpin File Format Processing Integer Overflow Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.5.4-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20339?
CVE-2026-20339 has a severity rating of high at 7.5.
How do I fix CVE-2026-20339?
To mitigate CVE-2026-20339, ensure that you update ClamAV to the latest version that includes the necessary patches.
What is the impact of CVE-2026-20339?
CVE-2026-20339 can lead to a denial of service condition or potentially other impacts due to memory corruption.
Who is affected by CVE-2026-20339?
Any user of ClamAV utilizing the PESpin file format parser is susceptible to CVE-2026-20339.
What type of vulnerability is CVE-2026-20339?
CVE-2026-20339 is categorized as an Integer Overflow vulnerability.