CVE-2026-20348 | Cisco ClamAV up to 8.4.5.30483 XAR File Format Parser memory corruption

A vulnerability, which was classified as critical, was found in Cisco ClamAV. Affected by this vulnerability is an unknown functionality of the component XAR File Format Parser. Executing a manipulation can lead to memory corruption.

This vulnerability is handled as CVE-2026-20348. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.