fr Sign in

4.7 Medium

CVE-2026-3201 USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

Description

USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

Affected products and versions

Product	Affected versions	Fixed in
Wireshark 4.6	4.6.0 → < 4.6.4	4.6.4
Wireshark 4.4	4.4.0 → < 4.4.14	4.4.14

References

www.wireshark.org www.wireshark.org
GitLab Issue #20972 gitlab.com

Timeline

Published February 25, 2026
Last modified March 27, 2026

The 185 CVEs of Wireshark →

CVE-2026-95391 ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium CVE-2026-95389 SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service 8.1 High CVE-2026-95386 TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium CVE-2026-95390 PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium

Track this CVE