ZDI-25-417: Clam AntiVirus UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Clam AntiVirus. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 6.1. The following CVEs are assigned: CVE-2025-20234.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-417?
ZDI-25-417 is ranked with a CVSS score that indicates a moderate severity level due to its potential to disclose sensitive information.
How do I fix ZDI-25-417?
To fix ZDI-25-417, ensure that you update your Clam AntiVirus to the latest version provided by the vendor.
What software is affected by ZDI-25-417?
ZDI-25-417 specifically affects Clam AntiVirus installations.
Can ZDI-25-417 be exploited remotely?
Yes, ZDI-25-417 can be exploited remotely, but it requires user interaction with a malicious page or file.
What type of vulnerability is ZDI-25-417?
ZDI-25-417 is a vulnerability that allows for the disclosure of sensitive information.