Findings

CVE-2026-5402

TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution

Published Apr 30, 2026 · updated Jul 15, 2026 · wireshark wireshark

TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 30, 2026 · NIST NVD

    Detected

    TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution

  2. Jul 15, 2026 · NIST NVD

    Updated

    TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution

Affected

  • cpe wireshark/wiresharkversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-5402

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-5402

    TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution

    nvd.nist.gov

References