Skip to main content
VulnerabilityPublished Updated

get_utf_8_string · Wireshark: Heap-buffer-overflow

Affects wiresharkSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 13 Aug 2026, 18:38 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzwiresharkpkg:generic/wiresharkOther threatsAffected
  • >=248ff020e7ea17785cc9451f6d24ad61c4310d1f
  • =v4.1.0
  • =v4.1.1rc0
  • =v4.2.0rc0
  • =v4.3.0rc0
  • =v4.2.0rc1
  • =v4.2.0rc2
  • =wireshark-4.2.0rc2
  • =v4.2.0rc3
  • =v4.2.0
  • =v4.2.1rc0
  • =wireshark-4.2.0
  • =v4.2.1
  • =v4.2.2rc0
  • =wireshark-4.2.1
  • =v4.2.2
  • =v4.2.3rc0
  • =wireshark-4.2.2
  • =v4.2.3
  • =v4.2.4rc0
  • =wireshark-4.2.3
  • =v4.2.4
  • =v4.2.5rc0
  • =wireshark-4.2.4
  • =v4.2.5
  • =v4.2.6rc0
  • =wireshark-4.2.5
  • =v4.3.0rc1
  • =v4.2.6
  • =v4.2.7rc0
  • =wireshark-4.2.6
  • =v4.3.0
  • =v4.3.1rc0
  • =v4.3.1
  • =v4.3.2rc0
  • =v4.4.0rc0
  • =v4.5.0rc0
  • =v4.4.0rc1
  • =v4.2.7
  • =v4.2.8rc0
  • =v4.4.0
  • =v4.4.1rc0
  • =wireshark-4.2.7
  • =wireshark-4.4.0
  • =v4.2.8
  • =v4.2.9rc0
  • =v4.4.1
  • =v4.4.2rc0
  • =wireshark-4.2.8
  • =wireshark-4.4.1
  • =v4.2.10rc0
  • =v4.2.9
  • =v4.4.2
  • =v4.4.3rc0
  • =wireshark-4.2.9
  • =wireshark-4.4.2
  • =ssv0.9.0rc0
  • =v4.2.10
  • =v4.2.11rc0
  • =v4.4.3
  • =v4.4.4rc0
  • =wireshark-4.2.10
  • =wireshark-4.4.3
  • =ssv0.9.0rc1
  • =ssv0.9.0
  • =v4.2.11
  • =v4.2.12rc0
  • =v4.4.4
  • =v4.4.5rc0
  • =wireshark-4.2.11
  • =wireshark-4.4.4
  • =ssv0.9.1
  • =v4.4.5
  • =v4.4.6rc0
  • =wireshark-4.4.5
  • =ssv0.9.2rc0
  • =v4.4.6
  • =v4.6.7rc0
  • =wireshark-4.4.6
  • =v4.4.7rc0
  • =v4.2.12
  • =v4.2.13rc0
  • =v4.4.7
  • =v4.4.8rc0
  • =wireshark-4.2.12
  • =wireshark-4.4.7
  • =ssv0.9.2
  • =ssv0.9.3rc0
  • =v4.4.8
  • =v4.4.9rc0
  • =wireshark-4.4.8
  • =ssv0.9.3
  • =v4.2.13
  • =v4.2.14rc0
  • =v4.4.10rc0
  • =v4.4.9
  • =v4.6.0rc0
  • =v4.6.0rc1
  • =v4.7.0rc0
  • =wireshark-4.2.13
  • =wireshark-4.4.9
  • =ssv0.9.4rc0
  • =v4.2.14
  • =v4.4.10
  • =v4.6.0
  • =v4.2.15rc0
  • =v4.4.11rc0
  • =v4.6.1rc0
  • =v4.4.11
  • =v4.4.12rc0
  • =v4.6.1
  • =v4.6.2rc0
  • =v4.6.2
  • =v4.6.3rc0
  • =v4.4.12
  • =v4.4.13rc0
  • =v4.4.13
  • =v4.4.14rc0
  • =v4.6.3
  • =v4.6.4rc0
  • =v4.4.14
  • =v4.4.15rc0
  • =v4.6.4
  • =v4.6.5rc0
  • =v4.4.15
  • =v4.4.16rc0
  • =v4.6.5
  • =v4.6.6rc0
  • =v4.4.16
  • =v4.4.17rc0
  • =v4.6.6
  • =ssv0.10.0
  • =v4.7.0
  • =ssv0.10.1rc0
  • =v4.7.1rc0
  • =ssv0.10.1
  • =ssv0.10.2rc0
  • =v4.7.1
  • =v4.7.2rc0
  • =v4.4.17
  • =v4.4.18rc0
  • =v4.6.7
  • =v4.6.8rc0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should monitor Wireshark vendor advisories and OSS-Fuzz reports for updates and apply patches once available.

Description

A heap-buffer-overflow vulnerability exists in Wireshark's get_utf_8_string function, as reported by OSS-Fuzz. The issue causes a read overflow during processing of URL-encoded form data. Multiple specific Wireshark versions are affected. No CVSS score is assigned, and no known exploits are reported in the wild.

References

Community reviews

Loading reviews…