The vulnerability CVE-2026-6528 affects Wireshark versions 4.6.0 to 4.6.4 and is caused by an infinite loop in the TLS protocol dissector component. This infinite loop arises from a loop with an unreachable exit condition (CWE-835), which can be triggered to cause the application to hang, resulting in a denial of service. The CVSS v3.1 base score is 5.5 (medium severity) with attack vector local, low attack complexity, no privileges required, user interaction required, and impact limited to availability. No official patch or remediation level has been published by the vendor as of the data provided.

Successful exploitation leads to denial of service by causing Wireshark to enter an infinite loop and become unresponsive. There is no impact on confidentiality or integrity. The attack requires local access and user interaction, limiting the scope of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening untrusted TLS traffic captures in affected Wireshark versions. Monitor vendor channels for updates and apply patches promptly once available.