alex-acero-security/cve-2025-20260-pocProof-of-concept exploit for CVE-2025-20260, a buffer overflow in ClamAV's PDF scanning. Includes a Python script to generate a malicious PDF and core dump analysis for research and detection.
This is a proof of concept for CVE-2025-20260. This is a vulnerability in the ClamAV software's PDF scanning processes. By sending a specially crafted, malicious PDF file it is possible to cause a buffer overflow, resulting in a denial of service or arbitrary code execution.
This repository contains both the python script to generate the malicious pdf file and a core dump analysis once the antivirus is forcefully terminated.
