Multiple vulnerabilities in Wireshark

Description

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Infinite loop vulnerability in TIFF protocol dissector can be exploited to cause denial of service.
2. Vulnerability in configuration profile import can be exploited to cause denial of service or execute arbitrary code.
3. Vulnerability in PEAK CAN TRC file parser can be exploited to cause denial of service.
4. Vulnerability in SPDY protocol dissector can be exploited to cause denial of service.
5. Infinite loop vulnerability in TTL file parser can be exploited to cause denial of service.
6. Memory leak vulnerability in IEEE C37.118 Synchrophasor protocol dissector can be exploited to cause denial of service.
7. Vulnerability in ZigBee ZCL protocol dissector can be exploited to cause denial of service.
8. Infinite loop and memory leak vulnerability in USB HID protocol dissector can be exploited to cause denial of service.
9. Vulnerability in Catapult DCT2000 protocol dissector can be exploited to cause denial of service.
10. Vulnerability in Sharkd utility can be exploited to cause denial of service.
11. Large loop vulnerability in Microsoft Network Monitor file parser can be exploited to cause denial of service.
12. Vulnerability in MBIM protocol dissector can be exploited to cause denial of service.
13. Vulnerability in Toshiba file parser can be exploited to cause denial of service.
14. Vulnerability in Frame protocol metadissector can be exploited to cause denial of service.
15. Buffer overflow vulnerability in RF4CE packet parsing can be exploited to cause denial of service or execute arbitrary code.
16. Vulnerability in X11 protocol dissector can be exploited to cause denial of service.
17. Vulnerability in SCTP protocol dissector can be exploited to cause denial of service.
18. Vulnerability in IEEE 802.11 protocol dissector can be exploited to cause denial of service.
19. Vulnerability in CSN.1 protocol dissector can be exploited to cause denial of service.

Original advisories

• wnpa-sec-2026-97

• wnpa-sec-2026-107
• wnpa-sec-2026-108
• wnpa-sec-2026-105
• wnpa-sec-2026-92
• wnpa-sec-2026-98
• wnpa-sec-2026-110
• wnpa-sec-2026-94
• wnpa-sec-2026-102
• wnpa-sec-2026-93
• wnpa-sec-2026-95
• wnpa-sec-2026-103
• wnpa-sec-2026-104
• wnpa-sec-2026-101
• wnpa-sec-2026-99
• wnpa-sec-2026-106
• wnpa-sec-2026-109
• wnpa-sec-2026-96
• wnpa-sec-2026-100

Exploitation

Related products

• Wireshark

CVE list

• CVE-2026-96418
  unknown
• CVE-2026-96419
  unknown
• CVE-2026-95390
  unknown
• CVE-2026-95387
  unknown
• CVE-2026-95386
  unknown
• CVE-2026-95395
  unknown
• CVE-2026-95391
  unknown
• CVE-2026-96421
  unknown
• CVE-2026-96415
  unknown
• CVE-2026-95388
  unknown
• CVE-2026-95394
  unknown
• CVE-2026-95392
  unknown
• CVE-2026-96420
  unknown
• CVE-2026-96422
  unknown
• CVE-2026-96417
  unknown
• CVE-2026-96423
  unknown
• CVE-2026-95389
  unknown
• CVE-2026-96416
  unknown
• CVE-2026-95393
  unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com