PT-2026-22974 · Cisco+2 · Clamav+2

Published 2026-03-04 · Updated 2026-04-28 · CVE-2026-20031

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions ClamAV versions prior to 1.5.2 ClamAV versions prior to 1.4.4

Description A flaw exists in the HTML Cascading Style Sheets (CSS) module of ClamAV that could allow a remote, unauthenticated attacker to cause a denial of service (DoS) condition. This issue stems from improper error handling when splitting UTF-8 strings. An attacker can exploit this by submitting a specially crafted HTML file to ClamAV for scanning, potentially terminating the scanning process.

Recommendations Update ClamAV to version 1.5.2 or later. Update ClamAV to version 1.4.4 or later.

Fix

DoS

Weakness Enumeration

CWE-248

Related Identifiers

CVE-2026-20031

OPENSUSE-SU-2026:10325-1

OPENSUSE-SU-2026:20479-1

SUSE-SU-2026:1324-1

SUSE-SU-2026:1325-1

USN-8207-1

Affected Products

Clamav

Linuxmint

Ubuntu

References · 26

• https://osv.dev/vulnerability/openSUSE-SU-2026:20479-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-20031 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:1324-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10325-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-20031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20031 · Security Note
• https://ubuntu.com/security/notices/USN-8207-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-20031 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1325-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-20031 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-20031 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8207-1 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ · Vendor Advisory
• https://twitter.com/SecuriteInfoCom/status/2029278297511579871 · Twitter Post
• https://suse.com/security/cve/CVE-2026-20031 · Note