ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition."
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/SRVRS094ADM/ClamAV