TI-2026-06482 Aliases CVE-2026-7379 GHSA-253w-rh2x-47g3

Missing Release of Memory after Effective Lifetime in Wireshark

LOW 32CWE-401Published 2026-04-30 · Updated 2026-04-30

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-401.

Summary

Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00193 8th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed Wireshark (Wireshark Foundation): 4.6.5, 4.4.15

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Wireshark Foundation	Wireshark	4.6.0 to before 4.6.5; 4.4.0 to before 4.4.15	4.6.5, 4.4.15	Patch available	CNA

Wireshark VendorWireshark Foundation Affected 4.6.0 to before 4.6.5; 4.4.0 to before 4.4.15 Fixed in 4.6.5, 4.4.15 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:wireshark:wireshark::::::::	4.4.0 to before 4.4.15; 4.6.0 to before 4.6.5	Vulnerable	Wireshark Foundation

cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:* Versions 4.4.0 to before 4.4.15; 4.6.0 to before 4.6.5 Vulnerable ·Wireshark Foundation

Remediation

Fix · CNA Wireshark (Wireshark Foundation) Fixed in 4.6.5, 4.4.15

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2026-04-30
Wireshark 4.4.15, 4.6.5
37 records Highest priority Priority HIGH 5 HIGH, 15 MEDIUM, 17 LOW
Other records, highest priority first
- TI-2026-06479 NULL Pointer Dereference in WiresharkPriority HIGH 66
- TI-2026-05714 Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkPriority HIGH 66
- TI-2026-04965 Double Free in WiresharkPriority HIGH 66
Show all 37 records →

Timeline

2026-10-02 Threatist record created from CVE-2026-7379
2026-10-03 Alias added: GHSA-253w-rh2x-47g3

References

Exploit 1

https://gitlab.com/wireshark/wireshark/-/work_items/21214

Advisory 1

https://www.wireshark.org/security/wnpa-sec-2026-47.html

TI-2026-53718 Heap-based Buffer Overflow in Wireshark CVSS 3.1CRITICAL 9.8
TI-2026-63612 Heap-based Buffer Overflow in Wireshark CVSS 3.1HIGH 8.8
TI-2024-16149 A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of… CVSS 3.1HIGH 7.5
TI-2010-00291 Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and… CVSS 2.0HIGH 7.5
TI-2026-63614 Heap-based Buffer Overflow in Wireshark CVSS 3.1HIGH 8.1
TI-2014-01823 Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in… CVSS 2.0HIGH 9.3

See all 794 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences