Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to "read an invalid memory location."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.202
EPSS Ranking 95.1%