ClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to parse a relatively small file.
[
{
"product": "ClamAV before 0.100.1 unknown",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "ClamAV before 0.100.1 unknown"
}
]
}
]