CVE-2008-3215: Clam Anti-Virus Clamav

Medium severity, CVSS 5.0. EPSS: 4.7% chance of exploitation in the next 30 days.

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

Affected products

• Clam Anti-Virus Clamav: version 0.88.2 only; version 0.88.4 only; version 0.88.5 only; version 0.88.6 only; version 0.88.7 only; version 0.90 only; …

Published 2008-07-18. Last modified 2026-06-16.