CVE-2005-2056: Clam Anti-Virus Clamav

Low severity, CVSS 2.6. EPSS: 2.3% chance of exploitation in the next 30 days.

The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a crafted Quantum archive.

Affected products

• Clam Anti-Virus Clamav: version 0.85 only; version 0.85.1 only; version 0.86 only

Published 2005-06-29. Last modified 2026-06-16.