Two security vulnerabilities in Wireshark have been identified and addressed by Red Hat in their security advisory RHSA-2026:9666. The first vulnerability (CVE-2026-3203) involves a buffer over-read, and the second (CVE-2026-3201) concerns improperly controlled sequential memory allocation. Both vulnerabilities could potentially lead to memory corruption issues. Red Hat has released updated Wireshark packages for Red Hat Enterprise Linux 10 and its extended update support versions across multiple architectures including x86_64, s390x, ppc64le, and aarch64. The advisory rates the security impact as moderate and references CVE pages for detailed scoring and impact information.

The vulnerabilities involve memory handling flaws in Wireshark that could lead to buffer over-read and improper memory allocation. Such issues may cause application crashes or potentially allow attackers to execute arbitrary code or cause denial of service, depending on exploitation. The advisory classifies the impact as moderate, indicating a significant but not critical risk to affected systems running vulnerable Wireshark versions.

Red Hat has released updated Wireshark packages that fix these vulnerabilities. Users of Red Hat Enterprise Linux 10 and related variants should apply the updates as described in the Red Hat advisory RHSA-2026:9666 and the referenced update instructions at https://access.redhat.com/articles/11258. Applying these official patches is the recommended remediation. No additional mitigation steps are indicated by the vendor advisory.