CVE-2026-15163: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
Published Jul 8, 2026
·Updated
Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of service
Affected Software
3 affected components
Wireshark Wireshark>=4.6.0<=4.6.6, >=4.4.0<=4.4.16
Wireshark Wireshark>=4.4.0<4.4.17
Wireshark Wireshark>=4.6.0<4.6.7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.6.7
Event History
Jul 8, 2026
CVE Published
via MITRE·08:50 PM
Data Sourced
via MITRE·08:50 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-15163?
The severity of CVE-2026-15163 is medium with a score of 5.5.
2
What is CVE-2026-15163 about?
CVE-2026-15163 involves an infinite loop vulnerability in multiple protocol dissectors in Wireshark that can cause a denial of service.
3
How can I fix CVE-2026-15163?
To fix CVE-2026-15163, you should upgrade Wireshark to version 4.6.7 or later if you are using affected versions.
4
Which versions of Wireshark are affected by CVE-2026-15163?
Wireshark versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 are affected by CVE-2026-15163.
5
What types of attacks can CVE-2026-15163 facilitate?
CVE-2026-15163 can facilitate denial of service attacks through its infinite loop vulnerability.