Wireshark Foundation vulnerabilities and threats

158 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.5	EPSS 0.2%	CVE-2026-6525Wireshark · NULL Pointer Dereference Medium5.5EPSS 0.2%2026-05-02CVE Database V5CVE-2026-6525 IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 EPSS 0.2%Vulnerability Wireshark Foundation CWE-476	CVE Database V5	2026-05-02
Medium	4.7	EPSS 0.1%	CVE-2026-5404Wireshark · Classic Buffer Overflow Medium4.7EPSS 0.1%2026-04-30CVE Database V5CVE-2026-5404 A buffer overflow vulnerability exists in the K12 RF5 file parser of Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14. This flaw can cause the application to crash, resulting in a denial of service. EPSS 0.1%Vulnerability Wireshark Foundation CWE-120	CVE Database V5	2026-04-30
High	7.8	EPSS 0.2%	CVE-2026-5403Wireshark · Heap-based Buffer Overflow High7.8EPSS 0.2%2026-04-30CVE Database V5CVE-2026-5403 SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution EPSS 0.2%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-04-30
High	7.0	EPSS 0.2%	CVE-2026-5656Wireshark · Path Traversal High7.0EPSS 0.2%2026-04-30CVE Database V5CVE-2026-5656 Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution EPSS 0.2%Vulnerability Wireshark Foundation CWE-22	CVE Database V5	2026-04-30
High	7.8	EPSS 0.2%	CVE-2026-5405Wireshark · Heap-based Buffer Overflow High7.8EPSS 0.2%2026-04-30CVE Database V5CVE-2026-5405 RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution EPSS 0.2%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-5409Wireshark · Uncontrolled Recursion Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-5409 Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-674	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-5408Wireshark · Uncontrolled Recursion Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-5408 BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-674	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-5406Wireshark · Uncontrolled Recursion Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-5406 FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-674	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-5407Wireshark · Infinite Loop Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-5407 SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-5299Wireshark · Uncontrolled Recursion Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-5299 A vulnerability in Wireshark versions 4.4.0 to 4.4.14 and 4.6.0 to 4.6.4 in the ICMPv6 PvD protocol dissector can cause a denial of service due to uncontrolled recursion leading to a crash. This issue is identified as CWE-674. The vulnerability has a medium severity with a CVSS score of 5.5. EPSS 0.1%Vulnerability Wireshark Foundation CWE-674	CVE Database V5	2026-04-30
High	8.8	EPSS 0.4%	CVE-2026-5402Wireshark · Heap-based Buffer Overflow High8.8EPSS 0.4%2026-04-30CVE Database V5CVE-2026-5402 TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution EPSS 0.4%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-5401Wireshark · Uncontrolled Recursion Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-5401 AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-674	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-5654Wireshark · Stack-based Buffer Overflow Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-5654 AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-121	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-5655Wireshark · Use After Free Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-5655 SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-416	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-5657Wireshark · Double Free Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-5657 iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-415	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-5653Wireshark · Heap-based Buffer Overflow Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-5653 DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-6538Wireshark · Stack-based Buffer Overflow Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-6538 BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-121	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-6537Wireshark · Stack-based Buffer Overflow Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-6537 ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-121	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-6536Wireshark · Infinite Loop Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-6536 DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 EPSS 0.2%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-6535Wireshark · Improperly Controlled Sequential Memory Allocation Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-6535 Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-1325	CVE Database V5	2026-04-30

Page 4 of 8