CVE-2020-3341: 
Clam AntiVirus vulnerability analysis and mitigation

A vulnerability (CVE-2020-3341) was discovered in the PDF archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.101 - 0.102.2. The vulnerability was disclosed on May 12, 2020, affecting the PDF parsing functionality of ClamAV (ClamAV Blog).

The vulnerability is due to a stack buffer overflow read condition caused by improper size checking of a buffer used to initialize AES decryption routines. This vulnerability was discovered by OSS-Fuzz during security testing (ClamAV Blog).

An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition (NVD).

The vulnerability requires an unauthenticated, remote attacker to send a specially crafted PDF file to an affected system running ClamAV. No evidence of active exploitation in the wild has been reported (Debian LTS).

The vulnerability was patched in ClamAV version 0.102.3. Users are advised to upgrade to this version or later. The fix includes proper size checking of buffers used in PDF parsing and AES decryption routines (ClamAV Blog).