CVE-2021-1404

A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a heap buffer over-read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.

• CWE-20
• CWE-125

• https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.htmlRelease Notes, Vendor Advisory
• https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.htmlRelease Notes, Vendor Advisory

Published

Apr 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1398A vulnerability in the boot logic of Cisco IOS XE Software c…6.8
• CVE-2021-1399A vulnerability in the Self Care Portal of Cisco Unified Com…4.3
• CVE-2021-1400Multiple vulnerabilities in the web-based management interfa…8.8
• CVE-2021-1401Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1402A vulnerability in the software-based SSL/TLS message handle…8.6
• CVE-2021-1403A vulnerability in the web UI feature of Cisco IOS XE Softwa…7.4
• CVE-2021-1405A vulnerability in the email parsing module in Clam AntiViru…7.5
• CVE-2021-1406A vulnerability in Cisco Unified Communications Manager (Uni…4.9
• CVE-2021-1407Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2021-1408Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2021-1409Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2021-1410A vulnerability in the distribution list feature of Cisco&nb…4.3