CVE-2026-15165 is a heap-based buffer overflow vulnerability classified under CWE-122 affecting Wireshark versions 4.6.0 through 4.6.6. The flaw occurs in the TLS Encrypted ClientHello (ECH) decryptor, causing the application to crash and enabling denial of service. The vulnerability has a CVSS 3.1 base score of 5.5, indicating medium severity. Exploitation requires local access with low attack complexity and no privileges but does require user interaction. There is no confidentiality or integrity impact. No official fix or patch has been documented as of the publication date.

Successful exploitation causes a denial of service by crashing Wireshark when processing TLS ECH traffic. There is no impact on confidentiality or integrity. The vulnerability requires local access and user interaction, limiting remote exploitation potential. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid processing untrusted TLS ECH traffic or running Wireshark with elevated privileges. Monitor Wireshark vendor communications for updates.