CVE-2025-13946: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
Published Dec 3, 2025
·Updated
MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service
Affected Software
3 affected components
Wireshark Wireshark>=4.6.0<=4.6.1, >=4.4.0<=4.4.11
Wireshark Wireshark>=4.4.0<4.4.12
Wireshark Wireshark>=4.6.0<4.6.2
Remediation
Information
Upgrade to version 4.6.2, 4.4.12, or above
Event History
Dec 3, 2025
CVE Published
via MITRE·08:04 AM
Data Sourced
via MITRE·08:04 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-13946?
CVE-2025-13946 is classified as a denial of service vulnerability due to an infinite loop in the MEGACO dissector.
2
How do I fix CVE-2025-13946?
To fix CVE-2025-13946, update Wireshark to version 4.6.2 or later if using versions 4.6.0 to 4.6.1, and for versions 4.4.0 to 4.4.11, update to 4.4.12 or later.
3
What versions of Wireshark are affected by CVE-2025-13946?
Wireshark versions 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 are vulnerable to CVE-2025-13946.
4
What is the impact of exploiting CVE-2025-13946?
Exploitation of CVE-2025-13946 can lead to a denial of service by causing Wireshark to enter an infinite loop.
5
Is there a workaround for CVE-2025-13946?
Currently, there are no known workarounds for CVE-2025-13946; upgrading is the recommended solution.