Wireshark vulnerabilities
Published CVEs affecting Wireshark products: 115 record(s), with severity, exploitation and fixes.
CVE-2026-6531
Medium · 5.5
CWE-835 Apr 30, 2026
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-6530
Medium · 5.5
CWE-122 Apr 30, 2026
Heap-based Buffer Overflow in Wireshark
DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-6529
Medium · 5.5
CWE-122 Apr 30, 2026
Heap-based Buffer Overflow in Wireshark
iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-6528
Medium · 5.5
CWE-835 Apr 30, 2026
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service
CVE-2026-6527
Medium · 5.5
CWE-674 Apr 30, 2026
Uncontrolled Recursion in Wireshark
ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-6526
Medium · 5.5
CWE-476 Apr 30, 2026
NULL Pointer Dereference in Wireshark
RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4
CVE-2026-6524
Medium · 5.5
CWE-824 Apr 30, 2026
Access of Uninitialized Pointer in Wireshark
MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-6523
Medium · 5.5
CWE-835 Apr 30, 2026
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-6522
Medium · 5.5
CWE-835 Apr 30, 2026
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-6521
Medium · 5.5
CWE-835 Apr 30, 2026
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-6520
High · 7.5
CWE-835 Apr 30, 2026
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-6519
High · 7.5
CWE-835 Apr 30, 2026
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-5657
High · 7.5
CWE-415 Apr 30, 2026
Double Free in Wireshark
iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-5655
High · 7.5
CWE-416 Apr 30, 2026
Use After Free in Wireshark
SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service
CVE-2026-5654
High · 7.5
CWE-121 Apr 30, 2026
Stack-based Buffer Overflow in Wireshark
AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-5653
High · 7.5
CWE-122 Apr 30, 2026
Heap-based Buffer Overflow in Wireshark
DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-5409
Medium · 5.5
CWE-674 Apr 30, 2026
Uncontrolled Recursion in Wireshark
Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-5408
Medium · 5.5
CWE-674 Apr 30, 2026
Uncontrolled Recursion in Wireshark
BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-5407
Medium · 5.5
CWE-835 Apr 30, 2026
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-5406
Medium · 5.5
CWE-674 Apr 30, 2026
Uncontrolled Recursion in Wireshark
FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-5402
High · 8.8
CWE-122 Apr 30, 2026
Heap-based Buffer Overflow in Wireshark
TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution
CVE-2026-5401
Medium · 5.5
CWE-674 Apr 30, 2026
Uncontrolled Recursion in Wireshark
AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-5299
Medium · 5.5
CWE-674 Apr 30, 2026
Uncontrolled Recursion in Wireshark
ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-7379
High · 7.5
CWE-401 Apr 30, 2026
Missing Release of Memory after Effective Lifetime in Wireshark
Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-7378
High · 7.5
CWE-122 Apr 30, 2026
Heap-based Buffer Overflow in Wireshark
Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service