CVE-2008-3914: Clamav

High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c.

Affected products

• Clamav Clamav: up to and including 0.93.3

Published 2008-09-11. Last modified 2026-06-16.