Vulnerabilities

TI-2026-04731 CVE-2026-5404 · GHSA-8rgp-w6w3-2537

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

LOW 24

K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0012 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-120

TI-2026-04730 CVE-2026-5403 · GHSA-fp9p-ww3j-hpfw

Heap-based Buffer Overflow in Wireshark

LOW 35

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00161 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-122

TI-2026-04964 CVE-2026-5656 · GHSA-fw82-f2cv-p6p2

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

LOW 35

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0018 Published 2026-04-30 Fixed in 4.6.5, 4.4.15 CWE-22

TI-2026-04732 CVE-2026-5405 · GHSA-6p69-v349-83rh

Heap-based Buffer Overflow in Wireshark

LOW 35

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00161 Published 2026-04-30 Fixed in 4.6.5, 4.4.15 CWE-122

TI-2026-04736 CVE-2026-5409 · GHSA-jjwc-p294-59xw

Uncontrolled Recursion in Wireshark

MEDIUM 58

Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00143 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-674

TI-2026-04735 CVE-2026-5408 · GHSA-fv3g-cjhx-6p3x

Uncontrolled Recursion in Wireshark

MEDIUM 58

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00143 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-674

TI-2026-04733 CVE-2026-5406 · GHSA-m79q-hhmw-w23c

Uncontrolled Recursion in Wireshark

MEDIUM 58

FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00177 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-674

TI-2026-04734 CVE-2026-5407 · GHSA-wwc3-65mg-qwxf

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MEDIUM 58

SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00138 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-835

TI-2026-04632 CVE-2026-5299 · GHSA-j2v6-whqq-rrf6

Uncontrolled Recursion in Wireshark

MEDIUM 58

ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00122 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-674

TI-2026-04728 CVE-2026-5401 · GHSA-772w-jxjv-xc3f

Uncontrolled Recursion in Wireshark

MEDIUM 58

AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00122 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-674

TI-2026-04962 CVE-2026-5654 · GHSA-wmqv-gf9g-f856

Stack-based Buffer Overflow in Wireshark

HIGH 66

AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00206 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-121

TI-2026-04965 CVE-2026-5657 · GHSA-wvxj-3gq6-2mg4

Double Free in Wireshark

HIGH 66

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00206 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-415

TI-2026-04961 CVE-2026-5653 · GHSA-cphh-hqjx-9g8v

Heap-based Buffer Overflow in Wireshark

HIGH 66

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00206 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-122

TI-2026-05733 CVE-2026-6538 · GHSA-f67r-cw3c-gfg6

Stack-based Buffer Overflow in Wireshark

MEDIUM 58

BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0018 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-121

TI-2026-05732 CVE-2026-6537 · GHSA-rgw5-g2j8-66hh

Stack-based Buffer Overflow in Wireshark

MEDIUM 58

ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0018 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-121

TI-2026-05730 CVE-2026-6535 · GHSA-4mrg-698q-fxmg

Improperly Controlled Sequential Memory Allocation in Wireshark

LOW 24

Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00141 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-1325

TI-2026-05729 CVE-2026-6534 · GHSA-9g97-q3gc-893w

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MEDIUM 58

USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0018 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-835

TI-2026-05728 CVE-2026-6533 · GHSA-q3p3-3qhr-3586

Improperly Controlled Sequential Memory Allocation in Wireshark

MEDIUM 58

Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00146 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-1325

TI-2026-05727 CVE-2026-6532 · GHSA-76j3-5wcx-cqcg

Buffer Over-read in Wireshark

MEDIUM 58

Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00195 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-126

TI-2026-05726 CVE-2026-6531 · GHSA-5mwh-vg7p-2624

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

LOW 24

SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00188 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-835

TI-2026-05725 CVE-2026-6530 · GHSA-2jh8-vr4w-2chr

Heap-based Buffer Overflow in Wireshark

MEDIUM 58

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0016 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-122

TI-2026-05724 CVE-2026-6529 · GHSA-7prx-qj37-6gqq

Heap-based Buffer Overflow in Wireshark

LOW 24

iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00125 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-122

TI-2026-05722 CVE-2026-6527 · GHSA-jqpv-h2g7-5cmm

Uncontrolled Recursion in Wireshark

LOW 24

ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00125 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-674

TI-2026-05719 CVE-2026-6524 · GHSA-6f7g-wj5x-f3vq

Access of Uninitialized Pointer in Wireshark

LOW 24

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00124 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-824

TI-2026-05718 CVE-2026-6523 · GHSA-5f5p-267h-86w3

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

LOW 24

GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00124 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-835

Vulnerabilities

Filters