CVE-2025-1492

Uncontrolled Recursion in Wireshark

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Redhat Wireshark

Products

Enterprise Linux Wireshark

CVE-2025-13946

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2025-13945

Improperly Controlled Sequential Memory Allocation in Wireshark

HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2025-13674

Access of Uninitialized Pointer in Wireshark

BPv7 dissector crash in Wireshark 4.6.0 allows denial of service

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2025-13499

Access of Uninitialized Pointer in Wireshark

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2025-11626

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2024-9781

Improper Handling of Missing Values in Wireshark

AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2024-9780

Missing Initialization of a Variable in Wireshark

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2024-8645

Access of Uninitialized Pointer in Wireshark

SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2024-8250

Expired Pointer Dereference in Wireshark

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2024-4855

Use After Free in editcap

Use after free issue in editcap could cause denial of service via crafted capture file

CVSS 3.1 · 3.6 Low EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Wireshark

Products

Fedora Wireshark

CVE-2024-4854

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Wireshark

Products

Fedora Wireshark

CVE-2024-4853

Mismatched Memory Management Routines in editcap

Memory handling issue in editcap could cause denial of service via crafted capture file

CVSS 3.1 · 3.6 Low EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Wireshark

Products

Fedora Wireshark

CVE-2024-11596

Buffer Over-read in Wireshark

ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2024-11595

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2024-0211

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2024-0210

Uncontrolled Recursion in Wireshark

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2024-0209

NULL Pointer Dereference in Wireshark

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2024-0208

Improper Handling of Missing Values in Wireshark

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.8 High EPSS 1.8% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2024-0207

Out-of-bounds Read in Wireshark

HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Wireshark

Products

Wireshark