CVE-2026-5405 is a heap-based buffer overflow vulnerability in the Remote Desktop Protocol (RDP) dissector component of Wireshark versions 4.6.0 through 4.6.4 and 4.4.0 through 4.4.14. This vulnerability can cause the Wireshark application to crash, leading to denial of service, and may also allow an attacker to execute arbitrary code. The vulnerability is identified as CWE-122 (Heap-based Buffer Overflow). The CVSS 3.1 score of 7.8 reflects high impact on confidentiality, integrity, and availability, with attack vector local, low attack complexity, no privileges required, and user interaction required. The vendor has not yet provided an official fix or remediation instructions, and no exploits have been reported in the wild.

Successful exploitation can cause Wireshark to crash, resulting in denial of service. There is also a potential for arbitrary code execution, which could compromise system confidentiality, integrity, and availability. The vulnerability requires local access and user interaction to trigger.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when analyzing RDP traffic with affected Wireshark versions. Consider avoiding opening untrusted capture files or using alternative tools. Monitor the Wireshark Foundation's advisories for updates and apply patches promptly once available.