CVE-2026-6532 is a buffer over-read vulnerability (CWE-126) in the Kismet protocol dissector component of Wireshark versions 4.6.0 through 4.6.4 and 4.4.0 through 4.4.14. This vulnerability allows an attacker to cause a denial of service by crashing the application when processing crafted packets. The CVSS 3.1 base score is 5.5, reflecting a medium severity with local attack vector, low complexity, no privileges required, and user interaction needed. The vulnerability impacts availability only, with no confidentiality or integrity effects reported. No known exploits are currently in the wild, and no official patch or remediation level has been published by the vendor as of the data provided.

Successful exploitation results in a denial of service by crashing Wireshark when it processes maliciously crafted Kismet protocol data. There is no impact on data confidentiality or integrity. The attack requires local access and user interaction, limiting the attack surface. No known active exploitation has been reported.

Patch status is not yet confirmed — check the Wireshark Foundation advisory for current remediation guidance. Until a fix is available, avoid opening untrusted capture files containing Kismet protocol data or disable the Kismet protocol dissector if possible to reduce exposure.