fr Sign in

5.5 Medium

CVE-2026-6533 Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Description

Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Affected products and versions

Product	Affected versions	Fixed in
Wireshark 4.6	4.6.0 → < 4.6.5	4.6.5
Wireshark 4.4	4.4.9 → < 4.4.15	4.4.15

References

www.wireshark.org www.wireshark.org
GitLab Issue #21127 gitlab.com

Timeline

Published April 30, 2026
Last modified April 30, 2026

The 185 CVEs of Wireshark →

CVE-2026-95391 ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium CVE-2026-95389 SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service 8.1 High CVE-2026-95386 TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium CVE-2026-95390 PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service 5.5 Medium

Track this CVE