Why ClamAV 's anachronistic 2GB size limit for file scanning can be harmful

Paul Kosinski via clamav-users <[email protected]> Sun, 14 Dec 2025 16:57:16 -0500
Newsgroups gmane.comp.security.virus.clamav.user
Organization InterMedia Enterprises
Message-ID <[email protected]>
Modern video files can be *very* big, even with efficient modern compression technology such as H.264 (AVC), H.265 (HEVC), and AV1.

Conventional HD (1080p) movies can occupy 4-8 GB, while 4K movies (e.g., on Blu-ray discs) can occupy 50-100 GB!

Cf. https://darkskiesfilm.com/how-large-are-4k-movies/

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6082-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
December 14, 2025                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : vlc
CVE ID         : not yet available
Debian Bug     : 1013898 1021601

Multiple vulnerabilities were discovered in the VLC media player, which
could result in denial of service or potentially the execution of
arbitrary code if a malformed video file is opened.
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat