CVE-2025-20234

Name	CVE-2025-20234
Description	A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability by submitting a crafted file containing UDF content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the .
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	1108045

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
clamav (PTS)	bullseye	0.103.10+dfsg-0+deb11u1	fixed
	bullseye (security)	1.0.7+dfsg-1~deb11u2	fixed
	bookworm	1.0.7+dfsg-1~deb12u1	fixed
	sid, trixie	1.4.3+dfsg-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
clamav	source	bullseye	(not affected)
clamav	source	bookworm	(not affected)
clamav	source	(unstable)	1.4.3+dfsg-1	1108045

Notes

[bookworm] - clamav <not-affected> (Vulnerable code introduced in 1.2.0)
[bullseye] - clamav <not-affected> (Vulnerable code not present; introduced in 1.2.0)
https://blog.clamav.net/2025/06/clamav-143-and-109-security-patch.html