CVE-2025-20128

🗓️ 22 Jan 2025 16:21:12Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 495 Views

ClamAV OLE2 decryption vulnerability allows remote denial of service via crafted files.

Reporter	Title	Published	Views	Family All 62
FreeBSD	clamav -- Possbile denial-of-service vulnerability	22 Jan 202500:00	–	freebsd
Amazon	Medium: clamav1.4	6 Mar 202500:00	–	amazon
Amazon	Medium: clamav1.4	6 Mar 202500:00	–	amazon
AlpineLinux	CVE-2025-20128	22 Jan 202516:21	–	alpinelinux
BDU FSTEC	The vulnerability of the OLE2 form file analysis component in the Clam Antivirus anti-virus program allows a hacker to trigger a service failure.	24 Jan 202500:00	–	bdu_fstec
Chainguard	CVE-2025-20128 vulnerabilities	22 Jan 202517:15	–	cgr
Circl	CVE-2025-20128	22 Jan 202516:15	–	circl
Cisco	ClamAV OLE2 File Format Decryption Denial of Service Vulnerability	22 Jan 202516:00	–	cisco
Tenable Nessus	Cisco Secure Endpoint ClamAV OLE2 File Format Decryption DoS (cisco-sa-clamav-ole2-H549rphA)	31 Jan 202500:00	–	nessus
Tenable Nessus	Debian dla-4292 : clamav - security update	4 Sep 202500:00	–	nessus

NVD

Vulners

Node

clamav clamavRange1.0.0–1.0.8

clamav clamavRange1.1.0–1.4.2

Node

cisco secure_endpointRange<1.24.4macos

cisco secure_endpointRange<1.25.1linux

cisco secure_endpointRange<7.5.20windows

cisco secure_endpointRange8.0.1.21160–8.4.3windows

cisco secure_endpoint_private_cloudRange<4.2.0

[
  {
    "vendor": "Cisco",
    "product": "Cisco Secure Endpoint",
    "versions": [
      {
        "version": "7.0.5",
        "status": "affected"
      },
      {
        "version": "6.2.19",
        "status": "affected"
      },
      {
        "version": "7.3.3",
        "status": "affected"
      },
      {
        "version": "7.2.13",
        "status": "affected"
      },
      {
        "version": "6.1.5",
        "status": "affected"
      },
      {
        "version": "6.3.1",
        "status": "affected"
      },
      {
        "version": "6.2.5",
        "status": "affected"
      },
      {
        "version": "7.3.5",
        "status": "affected"
      },
      {
        "version": "6.2.1",
        "status": "affected"
      },
      {
        "version": "7.2.7",
        "status": "affected"
      },
      {
        "version": "7.1.1",
        "status": "affected"
      },
      {
        "version": "6.3.5",
        "status": "affected"
      },
      {
        "version": "6.2.9",
        "status": "affected"
      },
      {
        "version": "7.3.1",
        "status": "affected"
      },
      {
        "version": "6.1.7",
        "status": "affected"
      },
      {
        "version": "7.2.11",
        "status": "affected"
      },
      {
        "version": "7.2.3",
        "status": "affected"
      },
      {
        "version": "7.1.5",
        "status": "affected"
      },
      {
        "version": "6.3.3",
        "status": "affected"
      },
      {
        "version": "7.3.9",
        "status": "affected"
      },
      {
        "version": "6.2.3",
        "status": "affected"
      },
      {
        "version": "6.1.9",
        "status": "affected"
      },
      {
        "version": "7.2.5",
        "status": "affected"
      },
      {
        "version": "6.3.7",
        "status": "affected"
      },
      {
        "version": "1.12.3",
        "status": "affected"
      },
      {
        "version": "1.8.0",
        "status": "affected"
      },
      {
        "version": "1.11.1",
        "status": "affected"
      },
      {
        "version": "1.12.4",
        "status": "affected"
      },
      {
        "version": "1.10.0",
        "status": "affected"
      },
      {
        "version": "1.12.0",
        "status": "affected"
      },
      {
        "version": "1.8.1",
        "status": "affected"
      },
      {
        "version": "1.10.1",
        "status": "affected"
      },
      {
        "version": "1.12.1",
        "status": "affected"
      },
      {
        "version": "1.12.6",
        "status": "affected"
      },
      {
        "version": "1.14.0",
        "status": "affected"
      },
      {
        "version": "1.10.2",
        "status": "affected"
      },
      {
        "version": "1.12.2",
        "status": "affected"
      },
      {
        "version": "1.6.0",
        "status": "affected"
      },
      {
        "version": "1.11.0",
        "status": "affected"
      },
      {
        "version": "1.7.0",
        "status": "affected"
      },
      {
        "version": "1.13.0",
        "status": "affected"
      },
      {
        "version": "1.12.7",
        "status": "affected"
      },
      {
        "version": "1.8.4",
        "status": "affected"
      },
      {
        "version": "1.13.1",
        "status": "affected"
      },
      {
        "version": "1.9.0",
        "status": "affected"
      },
      {
        "version": "1.9.1",
        "status": "affected"
      },
      {
        "version": "1.12.5",
        "status": "affected"
      },
      {
        "version": "1.13.2",
        "status": "affected"
      },
      {
        "version": "8.1.7.21512",
        "status": "affected"
      },
      {
        "version": "8.1.7",
        "status": "affected"
      },
      {
        "version": "8.1.5",
        "status": "affected"
      },
      {
        "version": "8.1.3.21242",
        "status": "affected"
      },
      {
        "version": "8.1.3",
        "status": "affected"
      },
      {
        "version": "8.1.5.21322",
        "status": "affected"
      },
      {
        "version": "8.1.7.21417",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-ole2-H549rphA
blog	www.blog.clamav.net/2025/01/clamav-142-and-108-security-patch.html
lists	www.lists.debian.org/debian-lts-announce/2025/09/msg00006.html

17 Jun 2026 08:40Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.3 - 7.5

EPSS0.01509

SSVC

CWE-122