This vulnerability (CVE-2026-5654) involves a stack-based buffer overflow (CWE-121) in the AMR-NB codec implementation within Wireshark versions 4.6.0 through 4.6.4 and 4.4.0 through 4.4.14. The flaw allows an attacker to cause a denial of service by crashing the application. The CVSS 3.1 base score is 5.5, reflecting medium severity, with an attack vector limited to local access (AV:L), low attack complexity (AC:L), no privileges required (PR:N), but requiring user interaction (UI:R). The impact is limited to availability (A:H) with no confidentiality or integrity impact. The vulnerability is published and assigned but lacks a vendor-provided patch or remediation guidance.

Successful exploitation results in denial of service by crashing Wireshark when processing malformed AMR-NB codec data. There is no impact on confidentiality or integrity. The attack requires local access and user interaction, limiting the attack surface. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening untrusted or malformed AMR-NB codec data in affected Wireshark versions. Monitor Wireshark Foundation advisories for updates regarding patches or mitigations.