ClamAV XAR File Format Processing Memory Corruption Vulnerability

...

CVE-2026-20348: Buffer Copy without Checking Size of Input

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...