5.3
Medium
CVE-2025-20234 A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to…
Description
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability by submitting a crafted file containing UDF content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the .
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Secure Endpoint 8.1 | 8.1.3 → 8.1.7.21512 | No fix stated |
| Cisco Secure Endpoint 7.3 | 7.3.1 → 7.3.9 | No fix stated |
| Cisco Secure Endpoint 7.2 | 7.2.3 → 7.2.13 | No fix stated |
| Cisco Secure Endpoint 7.1 | 7.1.1 → 7.1.5 | No fix stated |
| Cisco Secure Endpoint | 7.0.5 | No fix stated |
| Cisco Secure Endpoint 6.3 | 6.3.1 → 6.3.7 | No fix stated |
| Cisco Secure Endpoint 6.2 | 6.2.1 → 6.2.19 | No fix stated |
| Cisco Secure Endpoint 6.1 | 6.1.5 → 6.1.9 | No fix stated |
| Cisco Secure Endpoint 6.0 | 6.0.7 → 6.0.9 | No fix stated |
Show the 16 other branches Hide the 16 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Secure Endpoint 1.24 | 1.24.1 → 1.24.4 | No fix stated |
| Cisco Secure Endpoint | 1.22.4 | No fix stated |
| Cisco Secure Endpoint 1.21 | 1.21.0 → 1.21.2 | No fix stated |
| Cisco Secure Endpoint | 1.18.1 | No fix stated |
| Cisco Secure Endpoint | 1.17.0 | No fix stated |
| Cisco Secure Endpoint 1.16 | 1.16.0 → 1.16.3 | No fix stated |
| Cisco Secure Endpoint 1.15 | 1.15.2 → 1.15.6 | No fix stated |
| Cisco Secure Endpoint 1.14 | 1.14.0 → 1.14.1 | No fix stated |
| Cisco Secure Endpoint 1.13 | 1.13.0 → 1.13.2 | No fix stated |
| Cisco Secure Endpoint 1.12 | 1.12.0 → 1.12.7 | No fix stated |
| Cisco Secure Endpoint 1.11 | 1.11.0 → 1.11.1 | No fix stated |
| Cisco Secure Endpoint 1.10 | 1.10.0 → 1.10.2 | No fix stated |
| Cisco Secure Endpoint 1.9 | 1.9.0 → 1.9.1 | No fix stated |
| Cisco Secure Endpoint 1.8 | 1.8.0 → 1.8.4 | No fix stated |
| Cisco Secure Endpoint | 1.7.0 | No fix stated |
| Cisco Secure Endpoint | 1.6.0 | No fix stated |
References
- cisco-sa-clamav-udf-hmwd9nDy sec.cloudapps.cisco.com
- ClamAV blog blog.clamav.net
Timeline
- Published
- Last modified
Other CVEs of Cisco Secure Endpoint
The 23 CVEs of Cisco Secure Endpoint →
CVE-2026-20348
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS…
7.5
High
CVE-2026-20345
A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS…
7.5
High
CVE-2026-20339
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a…
7.5
High
CVE-2026-20347
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a…
7.5
High