CVE-2026-6533 Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Description

Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Affected products and versions

Product	Affected versions	Fixed in
Wireshark 4.6	4.6.0 → < 4.6.5	4.6.5
Wireshark 4.4	4.4.9 → < 4.4.15	4.4.15

Other CVEs of Wireshark

The 185 CVEs of Wireshark →

CVE-2026-95391 ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium CVE-2026-95389 SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service 8.1 High CVE-2026-95386 TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium CVE-2026-95390 PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium