This vulnerability in Wireshark's MBIM protocol dissector causes an infinite loop due to an unreachable exit condition in the code. It affects Wireshark versions 4.6.0 through 4.6.4 and 4.4.0 through 4.4.14. The infinite loop can be triggered by specially crafted MBIM packets, leading to denial of service by causing the application to hang or become unresponsive. The CVSS 3.1 base score is 5.5, reflecting medium severity with local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and impact limited to availability. No known exploits in the wild have been reported. No vendor advisory or patch information is currently available.

Successful exploitation results in denial of service by causing Wireshark to enter an infinite loop and become unresponsive. There is no impact on confidentiality or integrity. The attack requires local access and user interaction to trigger the vulnerability.

Patch status is not yet confirmed — check the Wireshark Foundation advisory for current remediation guidance. Until a fix is available, avoid opening untrusted MBIM protocol traffic in affected Wireshark versions. Monitor official Wireshark channels for updates and apply patches promptly once released.