This advisory covers four security vulnerabilities in Wireshark packages for Red Hat Enterprise Linux 10.0 Extended Update Support and CodeReady Linux Builder. The issues are: CVE-2026-3203 (buffer over-read), CVE-2026-3201 (improperly controlled sequential memory allocation), CVE-2026-5405 (heap-based buffer overflow), and CVE-2026-5656 (path traversal). These vulnerabilities could potentially lead to memory corruption or unauthorized file access. Red Hat has released patched packages (wireshark-4.4.2-3.el10_0.4) to address these issues across multiple architectures. The advisory is classified as important with a high severity rating, though no CVSS scores are provided. No exploits are currently known in the wild. The update is available via Red Hat's official channels and should be applied promptly to affected systems.

The vulnerabilities include memory corruption issues such as buffer over-read, heap-based buffer overflow, and improper memory allocation, as well as a path traversal flaw. These could allow an attacker to cause application crashes, potentially execute arbitrary code, or access restricted files when processing network traffic captures. The impact is rated high by Red Hat Product Security. No known active exploitation has been reported at this time.

Red Hat has released an official security update (wireshark-4.4.2-3.el10_0.4) that fixes all identified vulnerabilities. Users running Red Hat Enterprise Linux 10.0 Extended Update Support and related CodeReady Linux Builder products should apply this update as soon as possible. Detailed update instructions are available at https://access.redhat.com/articles/11258. No additional mitigations are indicated by the vendor advisory.