Multiple ClamAV Vulnerabilities Lead to Denial of Service Risks

On July 1, 2026, several vulnerabilities affecting ClamAV were disclosed, including issues with PE files, 7z archives, and InstallShield files that could lead to denial of service (DoS) attacks. The vulnerabilities are identified as CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, and CVE-2026-20244. Affected systems include various Ubuntu and openSUSE versions running ClamAV. Attackers could exploit these vulnerabilities remotely, potentially causing crashes or excessive resource usage in the antivirus software. Users are advised to update their systems to mitigate these risks. The vulnerabilities have been confirmed and patches are available for various distributions. As of July 8, 2026, the situation remains critical for users who have not yet applied the updates.

Key Points: • ClamAV vulnerabilities could lead to denial of service attacks. • Seven CVEs were published on July 1, 2026, affecting multiple file types. • Users are urged to update their systems to prevent exploitation.