CVE-2026-15163 | Multiple protocol dissector infinite loops in Wireshark 4.6.… | CVSS 5.5 MEDIUM

Description

Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of service

CVE ID: CVE-2026-15163
State: PUBLISHED
Assigner: GitLab
Reserved: 2026-07-08 20:45 UTC
Published: 2026-07-08 20:50 UTC
Last updated: 2026-07-09 13:49 UTC
Primary CWE: CWE-835
CWE-835: Loop with Unreachable Exit Condition ('Infinite Loo…
Vendor / Product: Wireshark Foundation / Wireshark
Sources: cve.org · NVD

5.5 MEDIUM CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC — CISA Coordinator

Affected products (1)

Vendor	Product	Platform	Versions
Wireshark Foundation	Wireshark	—	4.6.0 < 4.6.7, 4.4.0 < 4.4.17

Weakness (CWE)

CWE	Source	Description
CWE-835	cna	CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

CVSS scores (1)

Score	Severity	Version	Source	Vector
5.5	MEDIUM	3.1	cna	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References (5)