CVE-2026-20216CWE-770

ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability

High · published July 1, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.

This vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00573 · 46.6th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-07-01T16:27Z
EPSS history
Timeline
  • 01 JUL 16:27Z
    ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability
    cvelistv5