CVE-2024-20290 | ClamAV up to 1.0.4/1.1/1.2.1 OLE2 File Parser heap-based overflow

A vulnerability, which was classified as critical, has been found in ClamAV up to 1.0.4/1.1/1.2.1. Affected by this issue is some unknown functionality of the component OLE2 File Parser. The manipulation leads to heap-based buffer overflow.

This vulnerability is handled as CVE-2024-20290. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.