CVE-2026-6533
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
Apr 30, 2026
CISA due date
—
The record
Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | wireshark | 0 | 4.6.5-1.1 |
Related vulnerabilities
- CVE-2026-6525 IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 Also affects wireshark
- CVE-2026-5656 Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows… Also affects wireshark
- CVE-2026-5403 SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service… Also affects wireshark
- CVE-2026-5404 K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial… Also affects wireshark
- CVE-2026-5405 RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows… Also affects wireshark
- CVE-2026-6538 BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows… Also affects wireshark
- CVE-2026-6537 ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows… Also affects wireshark
- CVE-2026-6870 GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows… Also affects wireshark