CVE-2018-1000085: ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, functi...

Security readout for executives and security teams

This flaw affects ClamAV 0.99.3 when it scans a maliciously crafted XAR archive. A scan can trigger an out-of-bounds heap read, potentially leaking memory and supporting later attack chains. The provided sources do not show active exploitation. Organizations may be exposed where ClamAV 0.99.3, or vulnerable distribution packages, scan untrusted files. Higher-relevance locations include mail filtering, upload scanning, artifact scanning, and shared file repositories that process archive formats including XAR. Treat as a routine but real security update, with faster handling for file-scanning services exposed to untrusted content. The business risk is not proven active exploitation, but vulnerable scanners can become part of broader compromise chains. Mitigation focus: Apply vendor security updates for ClamAV from the relevant Linux distribution.; Upgrade ClamAV to a build containing the referenced upstream fix commit.; Prioritize systems that automatically scan files from email, uploads, or shared repositories..

Prepared

Jun 7, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.