ZDI-26-899: Wireshark LBMC Fragment Reassembly Integer Overflow Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Wireshark's LBMC fragment reassembly feature. This flaw can be exploited by unauthenticated attackers to execute arbitrary code on affected systems. Only installations with LBMC fragment reassembly enabled are vulnerable.

• zerodayinitiative.com/advisories/ZDI-26-899/ (opens in a new tab)

• ZDI-26-898: Wireshark LoRaWAN Decryption Numeric Truncation Error Remote Code Execution VulnerabilityHighVulnerability2026-11-10
• ZDI-26-900: Wireshark SMB Object Export Integer Overflow Remote Code Execution VulnerabilityHighVulnerability2026-11-10
• ZDI-26-904: NVIDIA Megatron-LM Checkpoint Deserialization of Untrusted Data Remote Code Execution VulnerabilityHighVulnerability2026-11-10
• ZDI-26-905: X.Org Server libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow Remote Code Execution VulnerabilityHighVulnerability2026-11-10
• ZDI-26-906: X.Org Server libX11 XkbGetMap Reply Heap-based Buffer Overflow Remote Code Execution VulnerabilityHighVulnerability2026-11-10