Denial of Service Vulnerability in Wireshark by the Vendor Wireshark
CVE-2026-0962

5.3MEDIUM

Key Information:

Vendor

Wireshark
Status
Wireshark
Vendor
CVE Published:
14 January 2026

What is CVE-2026-0962?

A vulnerability in the SOME/IP-SD protocol dissector in Wireshark versions 4.6.0 through 4.6.2 and 4.4.0 through 4.4.12 can lead to a denial of service. This issue occurs when specific inputs are processed, which may cause the application to crash, denying service to users. Prompt action is advised to mitigate potential disruptions and ensure system reliability.

Affected Version(s)

Wireshark 4.6.0 < 4.6.3

Wireshark 4.4.0 < 4.4.13

References

https://www.wireshark.org/security/wnpa-sec-2026-03.html
https://gitlab.com/wireshark/wireshark/-/issues/20945
issue-trackingpermissions-required

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Fatih Çelik
.