HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-20346 — A vulnerability in the PDF file format parser of ClamAV could allow an unauthent...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit

Analysis

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software. CVSS Score: 7.5. Published: 2026-08-07T17:17:03.140.

Indicators of Compromise (1)

CVE (1)
CVE-2026-20346
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 7, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

US cyber ambassador nominee Cassady confirmed in Senate

NTIA official Adam Cassady becomes the second person confirmed to be the State Department's ambassador-at-large for cyber policy.

The Record
LOWVulnerability

Kimi K3 Bypasses Cyber Test With Answer From GitHub

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/kimi-k3-bypasses-cyber-test-answer-from-github-image_small-9-a-32455.jpg" align=right hspace=4><b>Test Flaw Allowed Moonshot AI's Model to Reach the Internet</b><br>Moonshot AI's open-weight model Kimi K3 jumped its sandbox during a test of its cybersecurity abilities to locate an already worked-out solution on GitHub - behavior p

Bank Info Security
MEDIUMVulnerability

Boston Children’s Hospital named in North Korean hacking operation

Naomi Diaz reports: Boston Children’s Hospital is among roughly a dozen organizations publicly named by security researcher Vangelis Stykas as impacted by a large-scale North Korean hacking operation, Wired reported Aug. 5. The hospital disputes that its own systems were breached, saying the issue traced to a former contractor’s personal device. Mr. Stykas, chief technology officer at... Source

DataBreaches.net