Clamav

Clamav is a widely embedded antivirus engine and command-line scanner deployed across mail gateways, file-sharing systems, and content-filtering appliances to detect malware and suspicious files. Despite its narrow product footprint—the project centers on the core Clamav scanner itself—the software's deep integration into enterprise infrastructure and its role as a de facto standard in open-source mail and web filtering gives it prominence beyond typical single-product vendors. Vulnerabilities affecting the engine lean toward moderate severity and recur through weakness classes dominated by memory-safety issues: out-of-bounds reads and writes, buffer-boundary violations, and input-validation gaps that arise from parsing complex file formats and archive structures. These weakness patterns reflect the inherent parsing complexity of a signature-based scanner that must safely examine untrusted, often compressed or obfuscated files across numerous formats. Defenders should track Clamav updates as a supply-chain dependency wherever the scanner is embedded; current severity, exploitation, and exposure counts are shown alongside this summary.