CyberRota Analysis
AI-GeneratedA vulnerability in the GPT file format parser of ClamAV allows unauthenticated remote attackers to exploit improper endian conversion handling, potentially leading to out-of-bounds buffer writes and memory corruption. This could result in a denial-of-service (DoS) condition, causing the ClamAV scanning process to terminate unexpectedly. Organizations using ClamAV should prioritize addressing this vulnerability to maintain system availability and security.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper handling of an endian conversion operation, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted GPT file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.