CVE Feed

    Dashboard / CVE / CVE-2025-26790

    CVE-2025-26790

    Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by the antivirus engine.

    Published:Sep 14, 2026
    Last Modified:Sep 15, 2026
    EPS:Sep 14, 2026
    EPSS Score:0.00332
    CVSS Score:3.7

    Affected Products

    Vendor
    Withsecure
    Product
    Atlant

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2024-45520 (CVSS 7.5) — WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corr…
    CVE-2024-27359 (CVSS 7.5) — Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop …
    CVE-2023-47263 (CVSS 7.5) — Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE3…
    CVE-2023-47264 (CVSS 7.5) — Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a den…
    CVE-2023-42520 (CVSS 7.5) — Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. Thi…
    CVE-2023-42522 (CVSS 7.5) — Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a …
    CVE-2023-42524 (CVSS 7.5) — Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affec…
    CVE-2023-42525 (CVSS 7.5) — Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affec…
    CVE-2023-42523 (CVSS 7.5) — Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects…
    CVE-2023-42526 (CVSS 7.5) — Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High