Wireshark versions from 4.6.0 to 4.6.6 contain a vulnerability in the TLS Encrypted ClientHello (ECH) decryptor that can be triggered to cause the application to crash, leading to denial of service. The vulnerability has an attack vector of local access, low attack complexity, no privileges required, but requires user interaction. The impact is limited to availability disruption without confidentiality or integrity compromise. There are no known exploits in the wild and no explicit patch information provided in the source data.

Exploitation of this vulnerability results in a denial of service by crashing the Wireshark application when processing TLS ECH data. There is no impact on confidentiality or integrity. The attack requires local access and user interaction, limiting the scope of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid processing untrusted TLS ECH traffic in affected Wireshark versions or use a version outside the affected range. Monitor vendor channels for updates and patches addressing this issue.