keyuraghao/CVE-2025-20260

PoC

First public PoC for CVE-2025-20260 (CVSS 9.8) - a ClamAV PDF-scanning buffer overflow, with core-dump analysis.

view exploit source poc_in_githubauthor keyuraghaopublished 2025-11-13catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-20260US	—	1.63% (76th)	Exploit	2025-06-18
A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condit…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.