Vulnerabilities

TI-2026-63616 CVE-2026-95391 · GHSA-4w5v-7gfx-jwv5

Use After Free in Wireshark

LOW 23

ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00096 Published 2026-09-29 Fixed in 4.6.9 CWE-416

TI-2026-63614 CVE-2026-95389 · GHSA-7xm4-72f8-6hpw

Heap-based Buffer Overflow in Wireshark

HIGH 70

SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00337 Published 2026-09-29 Fixed in 4.6.9, 4.4.19 CWE-122

TI-2026-63611 CVE-2026-95386 · GHSA-ff2c-72fw-m35j

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MEDIUM 58

TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00271 Published 2026-09-29 Fixed in 4.6.9 CWE-835

TI-2026-63615 CVE-2026-95390 · GHSA-9chx-5vfh-cc4w

NULL Pointer Dereference in Wireshark

MEDIUM 58

PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00271 Published 2026-09-29 Fixed in 4.6.9 CWE-476

TI-2026-63620 CVE-2026-95395 · GHSA-pf84-5c5r-rch4

Missing Release of Memory after Effective Lifetime in Wireshark

MEDIUM 58

IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00137 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-401

TI-2026-63612 CVE-2026-95387 · GHSA-v28h-8438-ghj5

Heap-based Buffer Overflow in Wireshark

HIGH 73

SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122

TI-2026-63619 CVE-2026-95394 · GHSA-xm65-f955-g866

Unchecked Input for Loop Condition in Wireshark

MEDIUM 55

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 4.7 Local No auth User interaction EPSS 0.0014 Published 2026-09-29 Fixed in 4.6.9, 4.4.19 CWE-606

TI-2026-63618 CVE-2026-95393 · GHSA-jp3x-6949-38v9

Heap-based Buffer Overflow in Wireshark

MEDIUM 55

CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 4.7 Local No auth User interaction EPSS 0.00131 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122

TI-2026-63617 CVE-2026-95392 · GHSA-ww33-r9xr-r55j

Buffer Over-read in Wireshark

MEDIUM 58

MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00155 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-126

TI-2026-63613 CVE-2026-95388 · GHSA-xc7p-ghhr-9vx9

Heap-based Buffer Overflow in Wireshark

MEDIUM 58

Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00137 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122

TI-2026-63773 CVE-2026-96422 · GHSA-gfv2-gh3h-x7gj

Reachable Assertion in Wireshark

MEDIUM 58

Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00139 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-617

TI-2026-63772 CVE-2026-96421 · GHSA-wg4g-83vx-mw68

Improperly Controlled Sequential Memory Allocation in Wireshark

MEDIUM 58

USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00138 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-1325

TI-2026-63768 CVE-2026-96417 · GHSA-42hw-vfv7-crgr

Heap-based Buffer Overflow in Wireshark

LOW 24

RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00145 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122

TI-2026-63769 CVE-2026-96418 · GHSA-pfm7-67mc-vxcq

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MEDIUM 58

TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00138 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-835

TI-2026-63770 CVE-2026-96419 · GHSA-2cxv-8hv2-vxxx

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

HIGH 67

Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00186 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-22

TI-2026-63771 CVE-2026-96420 · GHSA-f4wv-m8pm-cj63

Buffer Over-read in Wireshark

LOW 23

Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00092 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-126

TI-2026-63774 CVE-2026-96423 · GHSA-969r-pwxc-fjq2

Heap-based Buffer Overflow in Wireshark

LOW 32

X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00141 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122

TI-2026-63767 CVE-2026-96416 · GHSA-cvf3-jq74-h5vp

Heap-based Buffer Overflow in Wireshark

MEDIUM 58

IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00138 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122

TI-2026-63766 CVE-2026-96415 · GHSA-4j63-4v66-f2cj

Stack-based Buffer Overflow in Wireshark

MEDIUM 58

Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00137 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-121

TI-2026-53746 CVE-2026-76929 · GHSA-fg3x-px4w-mpc8

Out-of-bounds Read in Wireshark

LOW 24

Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00131 Published 2026-08-19 Partial fix · 4.6.8, 4.4.18 CWE-125

TI-2026-53745 CVE-2026-76928 · GHSA-3qqr-q2w4-r5qh

NULL Pointer Dereference in Wireshark

LOW 39

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00318 Published 2026-08-19 Fixed in 4.6.8, 4.4.18 CWE-476

TI-2026-53744 CVE-2026-76927 · GHSA-wgph-5cfp-hvhq

NULL Pointer Dereference in Wireshark

LOW 32

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00184 Published 2026-08-19 Partial fix · 4.6.8, 4.4.18 CWE-476

TI-2026-53743 CVE-2026-76926 · GHSA-8hhm-54fq-9wrx

Reachable Assertion in Wireshark

LOW 28

BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0022 Published 2026-08-19 Partial fix · 4.6.8, 4.4.18 CWE-617

TI-2026-53723 CVE-2026-76891 · GHSA-wmqm-vgc4-jrp6

Expired Pointer Dereference in Wireshark

LOW 28

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00215 Published 2026-08-19 Partial fix · 4.6.8, 4.4.18 CWE-825

TI-2026-53722 CVE-2026-76890 · GHSA-m8wh-xh8f-8mxc

Expired Pointer Dereference in Wireshark

LOW 28

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00215 Published 2026-08-19 Partial fix · 4.6.8, 4.4.18 CWE-825

Vulnerabilities

Filters