# CVE-2025-20234: clamav: A vulnerability in Universal Disk Format (UDF) processing of ClamAV couldallow an unauthenticated, remote attacker to...

CVE-2025-20234 is fixed in 24 products on 1 platform, first by clamav 1.4.3+dfsg-0ubuntu0.20.04.1+esm1, released June 18, 2025. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2025-20234
- Priority: High
- CVSS: 7.5 (Medium)
- EPSS: 0.0082
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 18, 2025

## Description

A vulnerability in Universal Disk Format (UDF) processing of ClamAV couldallow an unauthenticated, remote attacker to cause a denial of service(DoS) condition on an affected device.This vulnerability is due to a memory overread during UDF file scanning. Anattacker could exploit this vulnerability by submitting a crafted filecontaining UDF content to be scanned by ClamAV on an affected device. Asuccessful exploit could allow the attacker to terminate the ClamAVscanning process, resulting in a DoS condition on the affected software.For a description of this vulnerability, see the .

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | clamav Debian 13.5 (trixie) | 1.4.3+dfsg-1 | [DEBIAN-CVE-2025-20234](https://patchblox.com/security/data/fix/linux/debian-cve-2025-20234.md) | Jun 18, 2025 |
| Linux | clamav Debian 14 | 1.4.3+dfsg-1 | [DEBIAN-CVE-2025-20234](https://patchblox.com/security/data/fix/linux/debian-cve-2025-20234.md) | Jun 18, 2025 |
| Linux | clamav Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg-0ubuntu0.20.04.1+esm1 | [clamav 1.4.3+dfsg-0ubuntu0.20.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-clamav-1.4.3-dfsg-0ubuntu0.20.04.1-esm1.md) | Jun 18, 2025 |
| Linux | clamav Ubuntu 22.04.1 LTS (jammy) | 1.4.3+dfsg-0ubuntu0.22.04.1 | [clamav 1.4.3+dfsg-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-clamav-1.4.3-dfsg-0ubuntu0.22.04.1.md) | Jun 18, 2025 |
| Linux | clamav Ubuntu 24.04.5 LTS (noble) | 1.4.3+dfsg-0ubuntu0.24.04.1 | [clamav 1.4.3+dfsg-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-clamav-1.4.3-dfsg-0ubuntu0.24.04.1.md) | Jun 18, 2025 |
| Linux | clamav Ubuntu 24.10 (oracular) | 1.4.3+dfsg-0ubuntu0.24.10.1 | [clamav 1.4.3+dfsg-0ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-clamav-1.4.3-dfsg-0ubuntu0.24.10.1.md) | Jan 16, 2026 |
| Linux | clamav Ubuntu 25.04 (plucky) | 1.4.3+dfsg-0ubuntu0.25.04.1 | [clamav 1.4.3+dfsg-0ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-clamav-1.4.3-dfsg-0ubuntu0.25.04.1.md) | Jan 16, 2026 |
| Linux | clamav opensuse-leap 15.6 | 1.4.3-150600.18.18.1 | [SUSE-SU-2025:02200-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02200-1.md) | Jul 2, 2025 |
| Linux | clamav sles 15.6 | 1.4.3-150600.18.18.1 | [SUSE-SU-2025:02200-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02200-1.md) | Jul 2, 2025 |
| Linux | clamav sles 15.7 | 1.4.3-150600.18.18.1 | [SUSE-SU-2025:02200-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02200-1.md) | Jul 2, 2025 |
| Linux | clamav-base Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg-0ubuntu0.20.04.1+esm1 | [clamav-base 1.4.3+dfsg-0ubuntu0.20.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-clamav-base-1.4.3-dfsg-0ubuntu0.20.04.1-esm1.md) | Jun 18, 2025 |
| Linux | clamav-base Ubuntu 22.04.1 LTS (jammy) | 1.4.3+dfsg-0ubuntu0.22.04.1 | [clamav-base 1.4.3+dfsg-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-clamav-base-1.4.3-dfsg-0ubuntu0.22.04.1.md) | Jun 18, 2025 |
| Linux | clamav-base Ubuntu 24.04.5 LTS (noble) | 1.4.3+dfsg-0ubuntu0.24.04.1 | [clamav-base 1.4.3+dfsg-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-clamav-base-1.4.3-dfsg-0ubuntu0.24.04.1.md) | Jun 18, 2025 |
| Linux | clamav-base Ubuntu 24.10 (oracular) | 1.4.3+dfsg-0ubuntu0.24.10.1 | [clamav-base 1.4.3+dfsg-0ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-clamav-base-1.4.3-dfsg-0ubuntu0.24.10.1.md) | Jan 16, 2026 |
| Linux | clamav-base Ubuntu 25.04 (plucky) | 1.4.3+dfsg-0ubuntu0.25.04.1 | [clamav-base 1.4.3+dfsg-0ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-clamav-base-1.4.3-dfsg-0ubuntu0.25.04.1.md) | Jan 16, 2026 |
| Linux | clamav-daemon Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg-0ubuntu0.20.04.1+esm1 | [clamav-daemon 1.4.3+dfsg-0ubuntu0.20.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-clamav-daemon-1.4.3-dfsg-0ubuntu0.20.04.1-esm1.md) | Jun 18, 2025 |
| Linux | clamav-daemon Ubuntu 22.04.1 LTS (jammy) | 1.4.3+dfsg-0ubuntu0.22.04.1 | [clamav-daemon 1.4.3+dfsg-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-clamav-daemon-1.4.3-dfsg-0ubuntu0.22.04.1.md) | Jun 18, 2025 |
| Linux | clamav-daemon Ubuntu 24.04.5 LTS (noble) | 1.4.3+dfsg-0ubuntu0.24.04.1 | [clamav-daemon 1.4.3+dfsg-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-clamav-daemon-1.4.3-dfsg-0ubuntu0.24.04.1.md) | Jun 18, 2025 |
| Linux | clamav-daemon Ubuntu 24.10 (oracular) | 1.4.3+dfsg-0ubuntu0.24.10.1 | [clamav-daemon 1.4.3+dfsg-0ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-clamav-daemon-1.4.3-dfsg-0ubuntu0.24.10.1.md) | Jan 16, 2026 |
| Linux | clamav-daemon Ubuntu 25.04 (plucky) | 1.4.3+dfsg-0ubuntu0.25.04.1 | [clamav-daemon 1.4.3+dfsg-0ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-clamav-daemon-1.4.3-dfsg-0ubuntu0.25.04.1.md) | Jan 16, 2026 |
| Linux | clamav-docs Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg-0ubuntu0.20.04.1+esm1 | [clamav-docs 1.4.3+dfsg-0ubuntu0.20.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-clamav-docs-1.4.3-dfsg-0ubuntu0.20.04.1-esm1.md) | Jun 18, 2025 |
| Linux | clamav-docs Ubuntu 22.04.1 LTS (jammy) | 1.4.3+dfsg-0ubuntu0.22.04.1 | [clamav-docs 1.4.3+dfsg-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-clamav-docs-1.4.3-dfsg-0ubuntu0.22.04.1.md) | Jun 18, 2025 |
| Linux | clamav-docs Ubuntu 24.04.5 LTS (noble) | 1.4.3+dfsg-0ubuntu0.24.04.1 | [clamav-docs 1.4.3+dfsg-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-clamav-docs-1.4.3-dfsg-0ubuntu0.24.04.1.md) | Jun 18, 2025 |
| Linux | clamav-freshclam Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg-0ubuntu0.20.04.1+esm1 | [clamav-freshclam 1.4.3+dfsg-0ubuntu0.20.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-clamav-freshclam-1.4.3-dfsg-0ubuntu0.20.04.1-esm1.md) | Jun 18, 2025 |
| Linux | clamav-freshclam Ubuntu 22.04.1 LTS (jammy) | 1.4.3+dfsg-0ubuntu0.22.04.1 | [clamav-freshclam 1.4.3+dfsg-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-clamav-freshclam-1.4.3-dfsg-0ubuntu0.22.04.1.md) | Jun 18, 2025 |
| Linux | clamav-freshclam Ubuntu 24.04.5 LTS (noble) | 1.4.3+dfsg-0ubuntu0.24.04.1 | [clamav-freshclam 1.4.3+dfsg-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-clamav-freshclam-1.4.3-dfsg-0ubuntu0.24.04.1.md) | Jun 18, 2025 |
| Linux | clamav-freshclam Ubuntu 24.10 (oracular) | 1.4.3+dfsg-0ubuntu0.24.10.1 | [clamav-freshclam 1.4.3+dfsg-0ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-clamav-freshclam-1.4.3-dfsg-0ubuntu0.24.10.1.md) | Jan 16, 2026 |
| Linux | clamav-freshclam Ubuntu 25.04 (plucky) | 1.4.3+dfsg-0ubuntu0.25.04.1 | [clamav-freshclam 1.4.3+dfsg-0ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-clamav-freshclam-1.4.3-dfsg-0ubuntu0.25.04.1.md) | Jan 16, 2026 |
| Linux | clamav-milter Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg-0ubuntu0.20.04.1+esm1 | [clamav-milter 1.4.3+dfsg-0ubuntu0.20.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-clamav-milter-1.4.3-dfsg-0ubuntu0.20.04.1-esm1.md) | Jun 18, 2025 |
| Linux | clamav-milter Ubuntu 22.04.1 LTS (jammy) | 1.4.3+dfsg-0ubuntu0.22.04.1 | [clamav-milter 1.4.3+dfsg-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-clamav-milter-1.4.3-dfsg-0ubuntu0.22.04.1.md) | Jun 18, 2025 |
| Linux | clamav-milter Ubuntu 24.04.5 LTS (noble) | 1.4.3+dfsg-0ubuntu0.24.04.1 | [clamav-milter 1.4.3+dfsg-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-clamav-milter-1.4.3-dfsg-0ubuntu0.24.04.1.md) | Jun 18, 2025 |
| Linux | clamav-milter Ubuntu 24.10 (oracular) | 1.4.3+dfsg-0ubuntu0.24.10.1 | [clamav-milter 1.4.3+dfsg-0ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-clamav-milter-1.4.3-dfsg-0ubuntu0.24.10.1.md) | Jan 16, 2026 |
| Linux | clamav-milter Ubuntu 25.04 (plucky) | 1.4.3+dfsg-0ubuntu0.25.04.1 | [clamav-milter 1.4.3+dfsg-0ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-clamav-milter-1.4.3-dfsg-0ubuntu0.25.04.1.md) | Jan 16, 2026 |
| Linux | clamav-testfiles Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg-0ubuntu0.20.04.1+esm1 | [clamav-testfiles 1.4.3+dfsg-0ubuntu0.20.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-clamav-testfiles-1.4.3-dfsg-0ubuntu0.20.04.1-esm1.md) | Jun 18, 2025 |
| Linux | clamav-testfiles Ubuntu 22.04.1 LTS (jammy) | 1.4.3+dfsg-0ubuntu0.22.04.1 | [clamav-testfiles 1.4.3+dfsg-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-clamav-testfiles-1.4.3-dfsg-0ubuntu0.22.04.1.md) | Jun 18, 2025 |
| Linux | clamav-testfiles Ubuntu 24.04.5 LTS (noble) | 1.4.3+dfsg-0ubuntu0.24.04.1 | [clamav-testfiles 1.4.3+dfsg-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-clamav-testfiles-1.4.3-dfsg-0ubuntu0.24.04.1.md) | Jun 18, 2025 |
| Linux | clamav-testfiles Ubuntu 24.10 (oracular) | 1.4.3+dfsg-0ubuntu0.24.10.1 | [clamav-testfiles 1.4.3+dfsg-0ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-clamav-testfiles-1.4.3-dfsg-0ubuntu0.24.10.1.md) | Jan 16, 2026 |
| Linux | clamav-testfiles Ubuntu 25.04 (plucky) | 1.4.3+dfsg-0ubuntu0.25.04.1 | [clamav-testfiles 1.4.3+dfsg-0ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-clamav-testfiles-1.4.3-dfsg-0ubuntu0.25.04.1.md) | Jan 16, 2026 |
| Linux | clamav1.4 amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamav1.4-data amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamav1.4-debuginfo amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamav1.4-debugsource amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamav1.4-devel amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamav1.4-doc amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamav1.4-filesystem amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamav1.4-freshclam amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamav1.4-freshclam-debuginfo amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamav1.4-lib amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamav1.4-lib-debuginfo amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamav1.4-milter amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamav1.4-milter-debuginfo amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamd1.4 amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamd1.4-debuginfo amzn 2023 | 1.4.3-1.amzn2023.0.1 | [ALAS2023-2025-1081](https://patchblox.com/security/data/fix/linux/alas2023-2025-1081.md) | Jul 3, 2025 |
| Linux | clamdscan Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg-0ubuntu0.20.04.1+esm1 | [clamdscan 1.4.3+dfsg-0ubuntu0.20.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-clamdscan-1.4.3-dfsg-0ubuntu0.20.04.1-esm1.md) | Jun 18, 2025 |
| Linux | clamdscan Ubuntu 22.04.1 LTS (jammy) | 1.4.3+dfsg-0ubuntu0.22.04.1 | [clamdscan 1.4.3+dfsg-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-clamdscan-1.4.3-dfsg-0ubuntu0.22.04.1.md) | Jun 18, 2025 |
| Linux | clamdscan Ubuntu 24.04.5 LTS (noble) | 1.4.3+dfsg-0ubuntu0.24.04.1 | [clamdscan 1.4.3+dfsg-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-clamdscan-1.4.3-dfsg-0ubuntu0.24.04.1.md) | Jun 18, 2025 |
| Linux | clamdscan Ubuntu 24.10 (oracular) | 1.4.3+dfsg-0ubuntu0.24.10.1 | [clamdscan 1.4.3+dfsg-0ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-clamdscan-1.4.3-dfsg-0ubuntu0.24.10.1.md) | Jan 16, 2026 |
| Linux | clamdscan Ubuntu 25.04 (plucky) | 1.4.3+dfsg-0ubuntu0.25.04.1 | [clamdscan 1.4.3+dfsg-0ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-clamdscan-1.4.3-dfsg-0ubuntu0.25.04.1.md) | Jan 16, 2026 |
| Linux | libclamav12 Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg-0ubuntu0.20.04.1+esm1 | [libclamav12 1.4.3+dfsg-0ubuntu0.20.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libclamav12-1.4.3-dfsg-0ubuntu0.20.04.1-esm1.md) | Jun 18, 2025 |
| Linux | libclamav12 Ubuntu 22.04.1 LTS (jammy) | 1.4.3+dfsg-0ubuntu0.22.04.1 | [libclamav12 1.4.3+dfsg-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libclamav12-1.4.3-dfsg-0ubuntu0.22.04.1.md) | Jun 18, 2025 |
| Linux | libclamav12 Ubuntu 24.04.5 LTS (noble) | 1.4.3+dfsg-0ubuntu0.24.04.1 | [libclamav12 1.4.3+dfsg-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libclamav12-1.4.3-dfsg-0ubuntu0.24.04.1.md) | Jun 18, 2025 |
| Linux | libclamav12 Ubuntu 24.10 (oracular) | 1.4.3+dfsg-0ubuntu0.24.10.1 | [libclamav12 1.4.3+dfsg-0ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libclamav12-1.4.3-dfsg-0ubuntu0.24.10.1.md) | Jan 16, 2026 |
| Linux | libclamav12 Ubuntu 25.04 (plucky) | 1.4.3+dfsg-0ubuntu0.25.04.1 | [libclamav12 1.4.3+dfsg-0ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libclamav12-1.4.3-dfsg-0ubuntu0.25.04.1.md) | Jan 16, 2026 |

---

Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.