Critical RCE Vulnerability Discovered in ClamAV Open-Source Antivirus Software

Cisco has rolled out security updates to address a critical flaw reported in the ClamAV open source antivirus engine that could lead to remote code execution on susceptible devices.
Tracked as CVE-2023-20032 (CVSS score: 9.8), the issue relates to a case of remote code execution residing in the HFS+ file parser component.
The flaw affects versions 1.0.0 and earlier, 0.105.1 and earlier, and

0.105.1 1.0.0 address antivirus antivirus software case cisco clamav code code execution critical critical flaw cve cvss devices engine file flaw issue open source rce remote code remote code execution score security security updates software updates vulnerability