← Back

CVE-2025-20234

nvd nist
Published: Jun 18, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability by submitting a crafted file containing UDF content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the .

Affected (6)

Clamav
1 product
Clamav
Cisco
2 products
Secure Endpoint
Secure Endpoint Private Cloud
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Clamav
From 1.2.0 to 1.4.3
Configuration B
5 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Secure Endpoint
Before 1.26.1
Secure Endpoint
Before 1.26.1
Secure Endpoint
Before 7.5.21
Secure Endpoint
From 8.0.1.21160 to 8.4.5
Secure Endpoint Private Cloud
Before 4.2.2

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Third Party Advisory

Timeline

No history available yet.