CVE-2021-1405

A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper variable initialization that may result in an NULL pointer read. An attacker could exploit this vulnerability by sending a crafted email to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.

• CWE-120
• CWE-909

• https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.htmlRelease Notes, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2021/04/msg00012.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202104-07Third Party Advisory
• https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.htmlRelease Notes, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2021/04/msg00012.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202104-07Third Party Advisory

Published

Apr 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1399A vulnerability in the Self Care Portal of Cisco Unified Com…4.3
• CVE-2021-1400Multiple vulnerabilities in the web-based management interfa…8.8
• CVE-2021-1401Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1402A vulnerability in the software-based SSL/TLS message handle…8.6
• CVE-2021-1403A vulnerability in the web UI feature of Cisco IOS XE Softwa…7.4
• CVE-2021-1404A vulnerability in the PDF parsing module in Clam AntiVirus …7.5
• CVE-2021-1406A vulnerability in Cisco Unified Communications Manager (Uni…4.9
• CVE-2021-1407Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2021-1408Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2021-1409Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2021-1410A vulnerability in the distribution list feature of Cisco&nb…4.3
• CVE-2021-1411Multiple vulnerabilities in Cisco Jabber for Windows, Cisco …9.9