HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-20348 — A vulnerability in the XAR file format parser of ClamAV could allow an unauthent...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR files during scanning. An attacker could exploit this vulnerability by submitting a crafted file th

Analysis

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR files during scanning. An attacker could exploit this vulnerability by submitting a crafted file that contains XAR content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software. CVSS Score: 7.5. Published: 2026-08-07T17:17:03.537.

Indicators of Compromise (1)

CVE (1)
CVE-2026-20348
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 7, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

US cyber ambassador nominee Cassady confirmed in Senate

NTIA official Adam Cassady becomes the second person confirmed to be the State Department's ambassador-at-large for cyber policy.

The Record
LOWVulnerability

Kimi K3 Bypasses Cyber Test With Answer From GitHub

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/kimi-k3-bypasses-cyber-test-answer-from-github-image_small-9-a-32455.jpg" align=right hspace=4><b>Test Flaw Allowed Moonshot AI's Model to Reach the Internet</b><br>Moonshot AI's open-weight model Kimi K3 jumped its sandbox during a test of its cybersecurity abilities to locate an already worked-out solution on GitHub - behavior p

Bank Info Security
MEDIUMVulnerability

Boston Children’s Hospital named in North Korean hacking operation

Naomi Diaz reports: Boston Children’s Hospital is among roughly a dozen organizations publicly named by security researcher Vangelis Stykas as impacted by a large-scale North Korean hacking operation, Wired reported Aug. 5. The hospital disputes that its own systems were breached, saying the issue traced to a former contractor’s personal device. Mr. Stykas, chief technology officer at... Source

DataBreaches.net