Open Source ClamAV

Name: Open Source ClamAV
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

critical

by severity

0critical9high4medium0low

updated 2026-10-28

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-38831US	high7.8OT critical	99.8% (100th)	KEV	1.2.0	2023-08-23	< 1.2.0
CVE-2025-20260US	—	1.63% (76th)	Exploit	1.4.3	2025-06-18	2 versions
CVE-2026-20217US	—	0.57% (47th)	Exploit	1.4.5	2026-07-01	2 versions
CVE-2024-20328US	—	84.8% (100th)	—	1.2.2	2024-03-01	2 versions
CVE-2024-20290US	high7.5	33.3% (98th)	—	1.0.5	2024-02-07	2 versions
CVE-2018-14681US	high8.8	3.76% (90th)	—	0.100.2	2018-07-28	< 0.100.2
CVE-2018-14680US	medium6.5	3.71% (90th)	—	0.100.2	2018-07-28	< 0.100.2
CVE-2018-14682US	high8.8	3.61% (89th)	—	0.100.2	2018-07-28	< 0.100.2
CVE-2023-20212US	high7.5	3.44% (89th)	—	1.1.1	2023-08-18	3 versions
CVE-2018-14679US	medium6.5	3.27% (88th)	—	0.100.2	2018-07-28	< 0.100.2
CVE-2025-20128US	high7.5	1.83% (79th)	—	1.4.2	2025-01-22	2 versions
CVE-2018-15378US	medium5.5	1.31% (71st)	—	0.100.2	2018-10-15	< 0.100.2
CVE-2023-20197US	high7.5	1.17% (67th)	—	0.103.9	2023-08-16	3 versions
CVE-2025-20234US	high7.5	0.82% (57th)	—	1.4.3	2025-06-18	2 versions
CVE-2026-20348US	—	0.72% (54th)	—	1.5.4	2026-08-07	2 versions
CVE-2026-20337US	—	0.60% (49th)	—	1.5.4	2026-08-07	2 versions
CVE-2026-20244US	—	0.57% (47th)	—	1.5.3	2026-07-01	2 versions
CVE-2026-20243US	—	0.57% (47th)	—	1.4.5	2026-07-01	2 versions
CVE-2026-20216US	—	0.57% (47th)	—	1.4.5	2026-07-01	2 versions
CVE-2026-20215US	—	0.57% (47th)	—	1.4.5	2026-07-01	2 versions
CVE-2026-20214US	—	0.57% (47th)	—	1.5.3	2026-07-01	2 versions
CVE-2026-20213US	—	0.57% (47th)	—	1.4.5	2026-07-01	2 versions
CVE-2026-20347US	—	0.56% (46th)	—	1.5.4	2026-08-07	2 versions
CVE-2026-20345US	—	0.56% (46th)	—	1.5.4	2026-08-07	2 versions
CVE-2026-20339US	—	0.56% (46th)	—	1.5.4	2026-08-07	2 versions
CVE-2026-20338US	—	0.56% (46th)	—	1.4.6	2026-08-07	2 versions
CVE-2024-20505US	high7.5	0.56% (46th)	—	1.4.1	2024-09-04	4 versions
CVE-2026-20346US	—	0.54% (45th)	—	1.4.6	2026-08-07	2 versions
CVE-2026-20031US	—	0.44% (38th)	—	1.4.4	2026-03-04	2 versions
CVE-2024-20506US	medium6.1	0.32% (25th)	—	1.3.2	2024-09-04	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')8 CVEs
CWE-125Out-of-bounds Read6 CVEs
CWE-193Off-by-one Error3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-126Buffer Over-read1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)30 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan