CVE-2008-0728: Clamav

High severity, CVSS 10.0. EPSS: 2.8% chance of exploitation in the next 30 days.

The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."

Affected products

• Clamav Clamav: up to and including 0.92; version 0.01 only; version 0.02 only; version 0.3 only; version 0.03 only; version 0.05 only; …

Published 2008-02-12. Last modified 2026-06-16.