Cisco warns of denial of service flaw with PoC exploit code

Cisco released security updates for a ClamAV denial-of-service vulnerability (CVE-2025-20128) — a heap-based buffer overflow in the OLE2 decryption routine that can crash the ClamAV scanning process; proof-of-concept exploit code is available but Cisco PSIRT reports no evidence of active exploitation. The issue affects Cisco Secure Endpoint Connector on Linux, macOS, and Windows, and the advisory also references additional Cisco patches for other CVEs.