This vulnerability (CVE-2026-5403) affects Wireshark versions 4.6.0 through 4.6.4 and 4.4.0 through 4.4.14. It is a heap-based buffer overflow in the SBC codec component that can be triggered to cause a crash, resulting in denial of service and potentially enabling code execution. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges, and user interaction, impacting confidentiality, integrity, and availability at a high level. The Red Hat advisory linked does not provide explicit patch or remediation details.

Successful exploitation can cause Wireshark to crash (denial of service) and may allow an attacker to execute arbitrary code with the privileges of the user running Wireshark. The vulnerability affects confidentiality, integrity, and availability of the affected system. The attack complexity is low, but requires local access and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is explicitly stated in the provided advisory content. Users should monitor the Red Hat advisory and Wireshark Foundation announcements for updates and apply patches once available. Until then, avoid opening untrusted SBC codec data in Wireshark.