CVE-2014-9050: Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remo...

Security readout for executives and security teams

This issue affects older ClamAV versions before 0.98.5. A specially crafted Windows PE file could crash the scanner, disrupting malware scanning workflows. The public record describes denial of service, not data theft or code execution. Exposure is most likely where ClamAV before 0.98.5 scans untrusted files, including file intake, mail, upload, or malware-screening workflows. The provided affected metadata is incomplete, so confirm actual package versions locally. Treat as a service reliability risk for malware scanning infrastructure. Prioritize patching legacy ClamAV deployments, especially where scanning is on a critical file or email path. Mitigation focus: Upgrade ClamAV to 0.98.5 or later.; Apply vendor security updates from your Linux distribution.; Restart ClamAV scanning services after updating packages..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.