The ClamAV Team Clam Antivirus

Name: The ClamAV Team Clam Antivirus
Brand: The ClamAV Team

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical8high2medium0low

updated 2026-10-28

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-20260US	—	1.63% (76th)	Exploit	no fix	2025-06-18	2 versions
CVE-2024-20290US	high7.5	33.3% (98th)	—	no fix	2024-02-07	4 versions
CVE-2017-12379US	critical9.8	12.5% (96th)	—	no fix	2018-01-26	≤ 0.99.2
CVE-2017-12377US	critical9.8	11.6% (96th)	—	no fix	2018-01-26	≤ 0.99.2
CVE-2021-1405US	high7.5	3.03% (87th)	—	no fix	2021-04-08	≤ 0.103.1
CVE-2020-3123US	high7.5	2.60% (85th)	—	no fix	2020-02-05	2 versions
CVE-2021-1252US	high7.5	2.52% (85th)	—	no fix	2021-04-08	2 versions
CVE-2021-1404US	high7.5	2.13% (82nd)	—	no fix	2021-04-08	2 versions
CVE-2019-1788US	medium5.5	1.84% (79th)	—	no fix	2019-04-08	≤ 0.101.1
CVE-2024-20380US	—	1.10% (66th)	—	no fix	2024-04-18	≤ 1.3.1
CVE-2022-20803US	high7.5	1.06% (64th)	—	no fix	2023-02-17	0.104.0 → 0.104.2
CVE-2022-20792US	high7.8	0.57% (47th)	—	no fix	2022-08-10	≤ 0.103.6
CVE-2024-20505US	high7.5	0.56% (46th)	—	no fix	2024-09-04	4 versions
CVE-2024-20506US	medium6.1	0.32% (25th)	—	no fix	2024-09-04	4 versions

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read6 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-126Buffer Over-read1 CVEs
CWE-415Double Free1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.