8.8
High
CVE-2026-5402 TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution
Description
TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wireshark 4.6 | 4.6.0 → < 4.6.5 | 4.6.5 |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published |
References
- www.wireshark.org www.wireshark.org
- GitLab Issue #21090 gitlab.com
Timeline
- Published
- Last modified
Other CVEs of Wireshark
The 185 CVEs of Wireshark →
CVE-2026-95391
ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium
CVE-2026-95389
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
8.1
High
CVE-2026-95386
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium
CVE-2026-95390
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium