CVE-2026-20217

A flaw was found in ClamAV. An unauthenticated, remote attacker can exploit a vulnerability in the PESpin file format parser by submitting a specially crafted file. This flaw, caused by improper boundary checks, leads to an out-of-bounds buffer write and memory corruption. A successful exploit ca...