Denial of Service Vulnerability in PEAK CAN TRC File Parser for Wireshark
CVE-2026-95390

5.5MEDIUM

Key Information:

Vendor

Wireshark
Status
Wireshark
Vendor
CVE Published:
29 September 2026

What is CVE-2026-95390?

The PEAK CAN TRC file parser in Wireshark versions 4.6.0 through 4.6.8 is prone to a Denial of Service vulnerability that can cause the application to crash when processing specially crafted TRC files. This issue allows remote attackers to disrupt normal operations, affecting users who process these files for network protocol analysis. It is crucial for users of the affected Wireshark versions to apply updates or patches to mitigate this risk.

Affected Version(s)

Wireshark 4.6.0 < 4.6.9

References

https://www.wireshark.org/security/wnpa-sec-2026-95.html
https://gitlab.com/wireshark/wireshark/-/work_items/21503

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Daniel Birtwhistle
.