Multiple vulnerabilities in Wireshark

Description

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Infinite loop vulnerability in TIFF protocol dissector can be exploited to cause denial of service.
2. Vulnerability in configuration profile import can be exploited to cause denial of service or execute arbitrary code.
3. Vulnerability in PEAK CAN TRC file parser can be exploited to cause denial of service.
4. Vulnerability in SPDY protocol dissector can be exploited to cause denial of service.
5. Infinite loop vulnerability in TTL file parser can be exploited to cause denial of service.
6. Memory leak vulnerability in IEEE C37.118 Synchrophasor protocol dissector can be exploited to cause denial of service.
7. Vulnerability in ZigBee ZCL protocol dissector can be exploited to cause denial of service.
8. Infinite loop and memory leak vulnerability in USB HID protocol dissector can be exploited to cause denial of service.
9. Vulnerability in Catapult DCT2000 protocol dissector can be exploited to cause denial of service.
10. Vulnerability in Sharkd utility can be exploited to cause denial of service.
11. Large loop vulnerability in Microsoft Network Monitor file parser can be exploited to cause denial of service.
12. Vulnerability in MBIM protocol dissector can be exploited to cause denial of service.
13. Vulnerability in Toshiba file parser can be exploited to cause denial of service.
14. Vulnerability in Frame protocol metadissector can be exploited to cause denial of service.
15. Buffer overflow vulnerability in RF4CE packet parsing can be exploited to cause denial of service or execute arbitrary code.
16. Vulnerability in X11 protocol dissector can be exploited to cause denial of service.
17. Vulnerability in SCTP protocol dissector can be exploited to cause denial of service.
18. Vulnerability in IEEE 802.11 protocol dissector can be exploited to cause denial of service.
19. Vulnerability in CSN.1 protocol dissector can be exploited to cause denial of service.

Original advisories

• wnpa-sec-2026-97

• wnpa-sec-2026-107
• wnpa-sec-2026-108
• wnpa-sec-2026-105
• wnpa-sec-2026-92
• wnpa-sec-2026-98
• wnpa-sec-2026-110
• wnpa-sec-2026-94
• wnpa-sec-2026-102
• wnpa-sec-2026-93
• wnpa-sec-2026-95
• wnpa-sec-2026-103
• wnpa-sec-2026-104
• wnpa-sec-2026-101
• wnpa-sec-2026-99
• wnpa-sec-2026-106
• wnpa-sec-2026-109
• wnpa-sec-2026-96
• wnpa-sec-2026-100

Exploitation

Public exploits exist for this vulnerability.

Related products

• Wireshark

CVE list

• CVE-2026-96418
  high
• CVE-2026-96419
  high
• CVE-2026-95390
  high
• CVE-2026-95387
  critical
• CVE-2026-95386
  high
• CVE-2026-95395
  high
• CVE-2026-95391
  high
• CVE-2026-96421
  high
• CVE-2026-96415
  high
• CVE-2026-95388
  high
• CVE-2026-95394
  warning
• CVE-2026-95392
  high
• CVE-2026-96420
  high
• CVE-2026-96422
  high
• CVE-2026-96417
  high
• CVE-2026-96423
  high
• CVE-2026-95389
  critical
• CVE-2026-96416
  high
• CVE-2026-95393
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com