Description

A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability by submitting a crafted file containing UDF content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the .

INFO

Published Date :

2025-06-18T16:20:01.175Z

Last Modified :

2025-06-18T18:22:44.697Z

Source :

cisco
AFFECTED PRODUCTS

The following products are affected by CVE-2025-20234 vulnerability.

Vendors Products
Cisco
  • Secure Endpoint
  • Secure Endpoint Private Cloud
Clamav
  • Clamav
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-20234.

URL Resource
https://blog.clamav.net/2025/06/clamav-143-and-109-security-patch.html cve-icon cve-icon
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-udf-hmwd9nDy cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact