5.5 Medium

CVE-2026-96423 Heap-based Buffer Overflow in Wireshark

Description

X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1 detail

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitable with local access to the machine, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector: Local
Attack complexity: Low
Privileges required: None
Interaction: Required
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

Affected products and versions

Product	Affected versions	Fixed in
Wireshark 4.6	4.6.0 → < 4.6.9	4.6.9
Wireshark 4.4	4.4.0 → < 4.4.19	4.4.19

References

www.wireshark.org www.wireshark.org
gitlab.com gitlab.com

Timeline

Published September 29, 2026
Last modified November 3, 2026

The 185 CVEs of Wireshark →

CVE-2026-95391 ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium CVE-2026-95389 SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service 8.1 High CVE-2026-95386 TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium CVE-2026-95390 PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium

Track this CVE