CVE-2026-20244— ClamAV DMG File Processing Denial of Service Vulnerability
Possible ATT&CK Techniques 2AI
T1190 · Exploit Public-Facing Application T1499 · Endpoint Denial of ServiceAffected Version Matrix 146
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco Secure Endpoint | 7.0.5 | affected |
6.2.19 | affected | ||
7.3.3 | affected | ||
7.2.13 | affected | ||
6.1.5 | affected | ||
6.3.1 | affected | ||
6.2.5 | affected | ||
7.3.5 | affected | ||
| … +138 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-20244
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ClamAV DMG File Processing Denial of Service Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in DMG files during scanning, which may result in an integer overflow on 32-bit platforms only. An attacker could exploit this vulnerability by submitting a crafted file that contains DMG content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Secure Endpoint 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Secure Endpoint是美国Cisco公司的一套集成了静态和动态恶意软件分析以及威胁情报于一体的终端应用程序。 Cisco Secure Endpoint存在缓冲区错误漏洞，该漏洞源于扫描DMG文件时边界检查不当，可能仅在32位平台上导致整数溢出，可能导致未经身份验证的远程攻击者通过提交特制DMG文件造成内存损坏，进而触发拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Secure Endpoint | 7.0.5 | - |
II. Public POCs for CVE-2026-20244
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-20244
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-20244 (1)
Same Patch Batch · Cisco · 2026-07-01 · 8 CVEs total
| CVE-2026-20191 | 7.5 HIGH | Cisco Catalyst Center Arbitrary File Read Vulnerability |
| CVE-2026-20214 | 7.5 HIGH | ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability |
| CVE-2026-20213 | 7.5 HIGH | ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability |
| CVE-2026-20216 | 7.5 HIGH | ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability |
| CVE-2026-20217 | 7.5 HIGH | ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability |
| CVE-2026-20215 | 7.5 HIGH | ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability |
| CVE-2026-20243 | 7.5 HIGH | ClamAV ALZ Archive Processing Denial of Service Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Secure Endpoint
- CVE-2026-20243
ClamAV ALZ Archive Processing Denial of Service Vulnerabilit - CVE-2026-20215
ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corr - CVE-2026-20217
ClamAV PESpin File Format Processing Out-of-Bounds Memory Co - CVE-2026-20216
ClamAV InstallShield File Format Processing Resource Exhaust - CVE-2026-20213
ClamAV PE File Format Processing Out-of-Bounds Memory Corrup
Same vendor: Cisco
- CVE-2026-20313
Cisco Catalyst SD-WAN Security Hardening Release - Memory Co - CVE-2026-20311
Cisco IOS XE Software Web UI Denial of Service Vulnerability - CVE-2026-20289
Cisco RoomOS Logging Subsystem Information Disclosure Vulner - CVE-2026-20312
Cisco Catalyst SD-WAN Security Hardening Release - Informati - CVE-2026-20310
Cisco SD-WAN Software Security Hardening Release - Improper
Same weakness: CWE-120
- CVE-2026-18103
Dhcp-server: dhcp-server: persistent denial of service due t - CVE-2026-45537
OpenSIPS: Global Buffer Overflow in construct_uri - CVE-2026-45100
OpenSIPS: Buffer Overflow in Base64 Encode Transformation - CVE-2026-15314
Authenticated Denial-of-Service Vulnerability in TP-Link Tap - CVE-2026-24080
Buffer Copy Without Checking Size of Input in Biometrics
V. Comments for CVE-2026-20244
No comments yet