CVE-2026-6535 - Improperly Controlled Sequential Memory Allocation in Wireshark

Back Back to CVE browser

MEDIUM

Improperly Controlled Sequential Memory Allocation in Wireshark

Published Apr 30, 2026

6.5

MEDIUM

CVSS 3.1

EPSS 0.16%

Description

Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Affected products

Vendor Wireshark Foundation Product Wireshark Default
unaffected
- Version
  4.4.0
  Status
  affected
  Constraints
  <4.4.15
- Version
  4.6.0
  Status
  affected
  Constraints
  <4.6.5

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Wireshark Foundation

Wireshark

unaffected

Version	Status	Constraints
4.4.0	affected	<4.4.15
4.6.0	affected	<4.6.5

Red Hat Enterprise Linux 10

wireshark

Fix deferred
Red Hat Enterprise Linux 6

wireshark

Fix deferred
Red Hat Enterprise Linux 7

wireshark

Fix deferred
Red Hat Enterprise Linux 8

wireshark

Fix deferred
Red Hat Enterprise Linux 9

wireshark

Fix deferred

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	wireshark	Fix deferred	n/a
Red Hat Enterprise Linux 6	wireshark	Fix deferred	n/a
Red Hat Enterprise Linux 7	wireshark	Fix deferred	n/a
Red Hat Enterprise Linux 8	wireshark	Fix deferred	n/a
Red Hat Enterprise Linux 9	wireshark	Fix deferred	n/a

Remediation

Vendor solution

Upgrade to version 4.6.5 or above

Red Hat mitigation

To mitigate this issue, users should avoid opening untrusted capture files or capturing network traffic from untrusted sources with Wireshark. If live capture of potentially malicious traffic is required, consider performing it within a sandboxed environment to contain any potential denial of service.

Weaknesses (2)

CWE-1325

CWE-409

References (8)

https://access.redhat.com/security/cve/CVE-2026-6535
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2464035
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26342
Advisory
https://gitlab.com/wireshark/wireshark/-/issues/21097
issue-trackingpermissions-requiredExploitIssue Tracking
https://gitlab.com/wireshark/wireshark/-/issues/21098
issue-trackingpermissions-requiredBroken Link
https://nvd.nist.gov/vuln/detail/CVE-2026-6535
https://www.cve.org/CVERecord?id=CVE-2026-6535
https://www.wireshark.org/security/wnpa-sec-2026-26.html
Vendor Advisory

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-6535		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2464035		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26342		Advisory
https://gitlab.com/wireshark/wireshark/-/issues/21097		issue-trackingpermissions-requiredExploitIssue Tracking
https://gitlab.com/wireshark/wireshark/-/issues/21098		issue-trackingpermissions-requiredBroken Link
https://nvd.nist.gov/vuln/detail/CVE-2026-6535
https://www.cve.org/CVERecord?id=CVE-2026-6535
https://www.wireshark.org/security/wnpa-sec-2026-26.html		Vendor Advisory