cisco-sa-clamav-css-Fn4QSZMediumCVSS 5.3

ClamAV Cascading Style Sheets Image Parsing Error Handling Denial of Service Vulnerability

Published
March 4, 2026
Last Modified
March 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-20031 →

📋 Description

A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVE-2026-20031 — ClamAV CSS Image Parsing Error Handling Denial of Service Vulnerability (CVSS 3.1 5.3, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

🎯 Affected products148

  • Cisco Secure Endpoint
  • Cisco Secure Endpoint Private Cloud Console
  • Cisco Secure Endpoint 1.10.0
  • Cisco Secure Endpoint 1.10.1
  • Cisco Secure Endpoint 1.10.2
  • Cisco Secure Endpoint 1.11.0
  • Cisco Secure Endpoint 1.11.1
  • Cisco Secure Endpoint 1.12.0
  • Cisco Secure Endpoint 1.12.1
  • Cisco Secure Endpoint 1.12.2
  • Cisco Secure Endpoint 1.12.3
  • Cisco Secure Endpoint 1.12.4
  • Cisco Secure Endpoint 1.12.5
  • Cisco Secure Endpoint 1.12.6
  • Cisco Secure Endpoint 1.12.7
  • Cisco Secure Endpoint 1.13.0
  • Cisco Secure Endpoint 1.13.1
  • Cisco Secure Endpoint 1.13.2
  • Cisco Secure Endpoint 1.14.0
  • Cisco Secure Endpoint 1.14.1
  • Cisco Secure Endpoint 1.15.0
  • Cisco Secure Endpoint 1.15.1
  • Cisco Secure Endpoint 1.15.2
  • Cisco Secure Endpoint 1.15.3
  • Cisco Secure Endpoint 1.15.4
  • Cisco Secure Endpoint 1.15.5
  • Cisco Secure Endpoint 1.15.6
  • Cisco Secure Endpoint 1.16.0
  • Cisco Secure Endpoint 1.16.1
  • Cisco Secure Endpoint 1.16.2
  • +118 more not shown

✅ Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com Workarounds: There are no workarounds that address this vulnerability.

🔗 References (6)