Approved changes feed: RSS · Atom

cpe:2.3:a:clamav:clambc:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorClamav (1e757e73-0a07-5655-8f9d-e7b1c408ae90)
ProductClambc (4be8dedd-f331-54e7-810b-0240955d2e9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37167 not_vulnerable 2026-06-08 05:25:50.273982 ClamAV ClamBC < 0.103.0-rc - 'ClamBC' Executable Regular Expression Error
HIGH (8.4)
ClamAV versions prior to 0.103.0-rc contain a vulnerability in function name processing through the ClamBC bytecode interpreter that allows attackers to manipulate bytecode function names. Attackers can exploit the weak input validation in function name encoding to potentially execute malicious bytecode or cause unexpected behavior in the ClamAV engine.
Published: 2026-02-12T22:48:50.169Z
Updated: 2026-09-30T17:19:46.085Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.