Known vulnerabilities in ClamAV 0.101.3

Vendor: ClamAV
Software: ClamAV
Version: 0.101.3
Software CPE: cpe:2.3:a:clamav:clamav_antivirus:*:*:*:*:*:*:*:*
Total vulnerabilities: 16
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ClamAV version 0.101.3 ClamAV 0.101.3 is affected by 16 vulnerabilities: 2 critical, 2 high, 9 medium, 3 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141297 - Out-of-bounds write
CVE-2026-20345
CWE-787 Medium
No
No
1.4.6, 1.5.4 07.08.2026 SB2026080781
#VU141298 - Integer overflow
CVE-2026-20339
CWE-190 Medium
No
No
1.4.6, 1.5.4 07.08.2026 SB2026080781
#VU141302 - Allocation of Resources Without Limits or Throttling
CVE-2026-20348
CWE-770 Medium
No
No
1.4.6, 1.5.4 07.08.2026 SB2026080781
#VU141303 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-362 Low
No
No
1.4.6, 1.5.4 07.08.2026 SB2026080781
#VU113784 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-8088
CWE-22 Critical
Public exploit available
Exploited
1.4.6, 1.5.4 09.08.2025 SB2025080901
SB2025100738
SB2026080781
#VU111272 - Use After Free
CWE-416 High
No
No
1.0.9, 1.4.3 18.06.2025 SB2025061841
SB2025061842
SB2025061845
#VU79633 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-20197
CWE-835 Medium
No
No
0.103.9, 1.0.2, 1.1.1 16.08.2023 SB20230816163
SB20230821217
SB20230821218
and 21 more
#VU72298 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-20052
CWE-611 Medium
Public exploit available
No
0.103.8, 0.105.2, 1.0.1 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 17 more
#VU72297 - Heap-based Buffer Overflow
CVE-2023-20032
CWE-122 Critical
No
No
0.103.8, 0.105.2, 1.0.1 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 18 more
#VU52784 - NULL Pointer Dereference
CVE-2021-1405
CWE-476 Medium
No
No
0.103.2 01.05.2021 SB2021050109
SB2021040720
SB2021041384
and 6 more
#VU51964 - Uncontrolled Search Path Element
CVE-2021-1386
CWE-427 Low
No
No
0.103.2 07.04.2021 SB2021040718
SB2021040719
SB2021040720
and 1 more
#VU29233 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-3350
CWE-362 Low
No
No
0.102.4, 0.103 24.06.2020 SB2020062413
SB2020072714
SB2020071813
and 8 more
#VU27927 - Out-of-bounds read
CVE-2020-3341
CWE-125 Medium
No
No
0.102.3 15.05.2020 SB2020051508
SB2020052213
SB2020052214
and 9 more
#VU23559 - Improper input validation
CVE-2019-15961
CWE-20 Medium
No
No
0.101.5, 0.102.1 12.12.2019 SB2019121205
SB2019121208
SB2020010817
and 11 more
#VU21530 - Resource Management Errors
CVE-2019-12625
CWE-399 Medium
No
No
0.101.4 03.10.2019 SB2019100401
SB2020032674
SB2019082334
and 4 more
#VU19178 - Out-of-bounds write
CVE-2019-12900
CWE-787 High
No
No
0.101.4 15.07.2019 SB2019071503
SB2019072101
SB2019080907
and 85 more