Cisco Releases ClamAV Security Patches for Seven Vulnerabilities in Open-Source Antivirus Scanner

Cisco’s Talos group released ClamAV security patches (versions 1.5.3 and 1.4.5) addressing seven vulnerabilities in the open-source antivirus scanner, some dating back two decades. The flaws primarily reside in the code responsible for unpacking and parsing executable formats, including packer and PE (Portable Executable) file handling. These bugs affect ClamAV deployments in mail gateways, file upload checks, and endpoint security tools across organizations of all sizes. No specific CVE IDs, exploit impacts, or exact vulnerability ages were disclosed in the release. The updates also include additional hardening measures beyond the security fixes.