There is a possible heap overflow in libclamav/fsg.c prior to 0.100.0.
clamav clamav
debian debian linux 9.0
debian debian linux 8.0
debian debian linux 10.0