Memory Leak and Denial of Service in Wireshark USB HID Protocol Dissector

CVE-2026-96421

What is CVE-2026-96421?

The USB HID protocol dissector in Wireshark versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 suffers from an infinite loop vulnerability that can lead to extensive memory consumption. This can cause a denial of service, as the affected version becomes unresponsive under certain conditions. Users should be aware of this issue and consider upgrading to mitigate the risk associated with this vulnerability. For more details, refer to the official security advisory.

References