Multiple High-Severity Flaws in ClamAV Allow Remote Denial-of-Service Attacks

Cisco has disclosed seven high-severity vulnerabilities in ClamAV, its open-source antivirus engine. These flaws could allow unauthenticated remote attackers to crash the scanner with a crafted file, leading to a denial-of-service condition that halts malware scanning. Patches are reportedly on the way, though no active exploitation has been confirmed.