Denial of Service Vulnerability in Wireshark Products by The Wireshark Foundation
CVE-2026-6527

5.5MEDIUM

Key Information:

Vendor

Wireshark
Status
Wireshark
Vendor
CVE Published:
30 April 2026

What is CVE-2026-6527?

An identified vulnerability affecting Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows an attacker to exploit ASN.1 PER protocol dissectors. This may lead to unexpected crashes, thereby facilitating a denial of service condition. Users are urged to upgrade to the latest version and apply security patches to mitigate the risk.

Affected Version(s)

Wireshark 4.6.0 < 4.6.5

Wireshark 4.4.0 < 4.4.15

References

https://www.wireshark.org/security/wnpa-sec-2026-34.html
https://gitlab.com/wireshark/wireshark/-/work_items/21149

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Alexandre de Oliveira
.