CVE-2026-20339

EUVD-2026-54506
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device.

This vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
ciscoCNA
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 39.15%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
ciscosecure_endpoint
7.0.5
CNA
ciscosecure_endpoint
6.2.19
CNA
ciscosecure_endpoint
7.3.3
CNA
ciscosecure_endpoint
7.2.13
CNA
ciscosecure_endpoint
6.1.5
CNA
ciscosecure_endpoint
6.3.1
CNA
ciscosecure_endpoint
6.2.5
CNA
ciscosecure_endpoint
7.3.5
CNA
ciscosecure_endpoint
6.2.1
CNA
ciscosecure_endpoint
7.2.7
CNA
ciscosecure_endpoint
7.1.1
CNA
ciscosecure_endpoint
6.3.5
CNA
ciscosecure_endpoint
6.2.9
CNA
ciscosecure_endpoint
7.3.1
CNA
ciscosecure_endpoint
6.1.7
CNA
ciscosecure_endpoint
7.2.11
CNA
ciscosecure_endpoint
7.2.3
CNA
ciscosecure_endpoint
7.1.5
CNA
ciscosecure_endpoint
6.3.3
CNA
ciscosecure_endpoint
7.3.9
CNA
ciscosecure_endpoint
6.2.3
CNA
ciscosecure_endpoint
6.1.9
CNA
ciscosecure_endpoint
6.0.9
CNA
ciscosecure_endpoint
7.2.5
CNA
ciscosecure_endpoint
6.0.7
CNA
ciscosecure_endpoint
6.3.7
CNA
ciscosecure_endpoint
1.12.3
CNA
ciscosecure_endpoint
1.8.0
CNA
ciscosecure_endpoint
1.11.1
CNA
ciscosecure_endpoint
1.12.4
CNA
ciscosecure_endpoint
1.10.0
CNA
ciscosecure_endpoint
1.12.0
CNA
ciscosecure_endpoint
1.8.1
CNA
ciscosecure_endpoint
1.10.1
CNA
ciscosecure_endpoint
1.12.1
CNA
ciscosecure_endpoint
1.12.6
CNA
ciscosecure_endpoint
1.14.0
CNA
ciscosecure_endpoint
1.10.2
CNA
ciscosecure_endpoint
1.12.7
CNA
ciscosecure_endpoint
1.12.2
CNA
ciscosecure_endpoint
1.6.0
CNA
ciscosecure_endpoint
1.9.0
CNA
ciscosecure_endpoint
1.11.0
CNA
ciscosecure_endpoint
1.7.0
CNA
ciscosecure_endpoint
1.13.0
CNA
ciscosecure_endpoint
1.8.4
CNA
ciscosecure_endpoint
1.13.1
CNA
ciscosecure_endpoint
1.9.1
CNA
ciscosecure_endpoint
1.12.5
CNA
ciscosecure_endpoint
1.13.2
CNA
ciscosecure_endpoint
8.1.7.21512
CNA
ciscosecure_endpoint
8.1.7
CNA
ciscosecure_endpoint
8.1.5
CNA
ciscosecure_endpoint
8.1.3.21242
CNA
ciscosecure_endpoint
8.1.3
CNA
ciscosecure_endpoint
8.1.5.21322
CNA
ciscosecure_endpoint
8.1.7.21417
CNA
ciscosecure_endpoint
1.14.1
CNA
ciscosecure_endpoint
1.15.1
CNA
ciscosecure_endpoint
1.15.2
CNA
ciscosecure_endpoint
1.15.3
CNA
ciscosecure_endpoint
1.15.4
CNA
ciscosecure_endpoint
1.15.5
CNA
ciscosecure_endpoint
1.15.6
CNA
ciscosecure_endpoint
1.16.0
CNA
ciscosecure_endpoint
1.16.1
CNA
ciscosecure_endpoint
1.16.2
CNA
ciscosecure_endpoint
1.16.3
CNA
ciscosecure_endpoint
1.18.0
CNA
ciscosecure_endpoint
1.18.1
CNA
ciscosecure_endpoint
1.20.0
CNA
ciscosecure_endpoint
1.21.0
CNA
ciscosecure_endpoint
1.21.1
CNA
ciscosecure_endpoint
1.21.2
CNA
ciscosecure_endpoint
1.21.3
CNA
ciscosecure_endpoint
1.22.0
CNA
ciscosecure_endpoint
1.22.1
CNA
ciscosecure_endpoint
1.22.2
CNA
ciscosecure_endpoint
1.22.3
CNA
ciscosecure_endpoint
1.22.4
CNA
ciscosecure_endpoint
1.24.0
CNA
ciscosecure_endpoint
1.24.1
CNA
ciscosecure_endpoint
1.24.2
CNA
ciscosecure_endpoint
1.24.3
CNA
ciscosecure_endpoint
1.24.4
CNA
ciscosecure_endpoint
1.26.0
CNA
ciscosecure_endpoint
1.24.5
CNA
ciscosecure_endpoint
1.26.1
CNA
ciscosecure_endpoint
1.27.0
CNA
ciscosecure_endpoint
1.15.0
CNA
ciscosecure_endpoint
1.17.0
CNA
ciscosecure_endpoint
1.17.1
CNA
ciscosecure_endpoint
1.17.2
CNA
ciscosecure_endpoint
1.19.0
CNA
ciscosecure_endpoint
1.20.1
CNA
ciscosecure_endpoint
1.20.2
CNA
ciscosecure_endpoint
1.20.3
CNA
ciscosecure_endpoint
1.20.4
CNA
ciscosecure_endpoint
1.20.5
CNA
ciscosecure_endpoint
1.20.6
CNA
ciscosecure_endpoint
1.23.0
CNA
ciscosecure_endpoint
1.23.1
CNA
ciscosecure_endpoint
1.20.7
CNA
ciscosecure_endpoint
1.20.8
CNA
ciscosecure_endpoint
1.25.0
CNA
ciscosecure_endpoint
1.25.1
CNA
ciscosecure_endpoint
1.25.2
CNA
ciscosecure_endpoint
1.27.1
CNA
ciscosecure_endpoint
1.27.2
CNA
ciscosecure_endpoint
7.3.13
CNA
ciscosecure_endpoint
7.3.15
CNA
ciscosecure_endpoint
7.4.1
CNA
ciscosecure_endpoint
7.4.1.20425
CNA
ciscosecure_endpoint
7.4.1.20439
CNA
ciscosecure_endpoint
7.4.3
CNA
ciscosecure_endpoint
7.4.3.20679
CNA
ciscosecure_endpoint
7.4.5
CNA
ciscosecure_endpoint
7.5.1.20813
CNA
ciscosecure_endpoint
7.5.1.20833
CNA
ciscosecure_endpoint
7.5.3
CNA
ciscosecure_endpoint
7.5.5
CNA
ciscosecure_endpoint
8.0.1.21160
CNA
ciscosecure_endpoint
8.0.1.21164
CNA
ciscosecure_endpoint
7.5.7
CNA
ciscosecure_endpoint
7.5.9
CNA
ciscosecure_endpoint
7.5.11
CNA
ciscosecure_endpoint
8.1.7.21585
CNA
ciscosecure_endpoint
7.5.13.21586
CNA
ciscosecure_endpoint
7.5.13.21598
CNA
ciscosecure_endpoint
8.2.1.21612
CNA
ciscosecure_endpoint
8.2.1.21650
CNA
ciscosecure_endpoint
7.5.15.21611
CNA
ciscosecure_endpoint
7.5.17.21680
CNA
ciscosecure_endpoint
8.2.3.30119
CNA
ciscosecure_endpoint
8.2.4.30130
CNA
ciscosecure_endpoint
8.4.0
CNA
ciscosecure_endpoint
7.5.19
CNA
ciscosecure_endpoint
8.4.1.30298
CNA
ciscosecure_endpoint
8.4.2.30317
CNA
ciscosecure_endpoint
8.4.1.30307
CNA
ciscosecure_endpoint
7.5.20
CNA
ciscosecure_endpoint
8.4.3
CNA
ciscosecure_endpoint
8.4.4.30419
CNA
ciscosecure_endpoint
8.4.4.30467
CNA
ciscosecure_endpoint
7.5.21.21732
CNA
ciscosecure_endpoint
8.4.5.30483
CNA
Debian logo
Debian Releases
Debian Product
Codename
clamav
bookworm
vulnerable
forky
1.4.6+dfsg-1
fixed
sid
1.4.6+dfsg-1
fixed
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
clamav
bionic
needs-triage
focal
needs-triage
jammy
Fixed 1.5.4+dfsg-0ubuntu0.22.04.1
released
noble
Fixed 1.5.4+dfsg-0ubuntu0.24.04.1
released
resolute
Fixed 1.5.4+dfsg-0ubuntu0.26.04.1
released
trusty
needs-triage
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
clamav
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
clamav-devel
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
clamav-docs-html
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
clamav-milter
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
libclamav12
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
libclammspack0
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
libclamunrar12
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
libfreshclam3
suse enterprise server 12 SP3
1.4.6-36.28.1
fixed
libfreshclam4
suse enterprise desktop 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise sap 12 SP5
1.5.4-3.59.1
fixed
suse enterprise sap 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise sap 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise sap 15 SP7
1.5.4-150600.18.31.1
fixed
suse enterprise server 12 SP5
1.5.4-3.59.1
fixed
suse enterprise server 15 SP4
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP5
1.5.4-150400.13.11.1
fixed
suse enterprise server 15 SP6
1.5.4-150600.18.31.1
fixed
suse enterprise server 15 SP7
1.5.4-150600.18.31.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
clamav1.4
Amazon Linux 2
0:1.4.6-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamav1.4-data
Amazon Linux 2
0:1.4.6-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamav1.4-debuginfo
Amazon Linux 2
0:1.4.6-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamav1.4-debugsource
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamav1.4-devel
Amazon Linux 2
0:1.4.6-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamav1.4-doc
Amazon Linux 2
0:1.4.6-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamav1.4-filesystem
Amazon Linux 2
0:1.4.6-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamav1.4-freshclam
Amazon Linux 2
0:1.4.6-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamav1.4-freshclam-debuginfo
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamav1.4-lib
Amazon Linux 2
0:1.4.6-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamav1.4-lib-debuginfo
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamav1.4-milter
Amazon Linux 2
0:1.4.6-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamav1.4-milter-debuginfo
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamav1.5
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamav1.5-data
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamav1.5-debuginfo
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamav1.5-debugsource
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamav1.5-devel
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamav1.5-doc
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamav1.5-filesystem
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamav1.5-freshclam
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamav1.5-freshclam-debuginfo
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamav1.5-lib
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamav1.5-lib-debuginfo
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamav1.5-milter
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamav1.5-milter-debuginfo
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamd1.4
Amazon Linux 2
0:1.4.6-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamd1.4-debuginfo
Amazon Linux 2023
0:1.4.6-1.amzn2023.0.1
fixed
clamd1.5
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
clamd1.5-debuginfo
Amazon Linux 2023
0:1.5.4-1.amzn2023.0.1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
clamav
Azure Linux 3.0
0:1.5.4-1.azl3
fixed
Common Weakness Enumeration
References
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26