This vulnerability in Wireshark's USB HID protocol dissector causes an infinite loop due to a loop construct with an unreachable exit condition (CWE-835). Affected versions include 4.6.0 through 4.6.4 and 4.4.0 through 4.4.14. The infinite loop can lead to denial of service by causing the application to hang or become unresponsive when processing crafted USB HID packets. The CVSS 3.1 base score is 5.5, reflecting medium severity with local attack vector, low attack complexity, no privileges required, and user interaction needed. No official fix or patch is currently documented.

Successful exploitation results in denial of service against the Wireshark application by triggering an infinite loop in the USB HID dissector. This does not impact confidentiality or integrity but can disrupt network traffic analysis by causing the application to hang or crash. The attack requires local access and user interaction to trigger the vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid analyzing untrusted USB HID traffic or use alternative methods to inspect such traffic. Monitor Wireshark updates for patches addressing this issue.