5.5

CVE-2026-6533

Exploit

Improperly Controlled Sequential Memory Allocation in Wireshark

Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wireshark ≫ Wireshark Version >= 4.4.0 <= 4.4.14
Wireshark ≫ Wireshark Version >= 4.6.0 <= 4.6.4
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.042
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
cve@gitlab.com 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-1325 Improperly Controlled Sequential Memory Allocation

The product manages a group of objects or resources and performs a separate memory allocation for each object, but it does not properly limit the total amount of memory that is consumed by all of the combined objects.

https://www.wireshark.org/security/wnpa-sec-2026-28.html
Vendor Advisory
https://gitlab.com/wireshark/wireshark/-/issues/21127
Third Party Advisory
Exploit
Issue Tracking
https://gitlab.com/wireshark/wireshark/-/work_items/21127
Third Party Advisory
Exploit
Issue Tracking