CVE-2026-6521: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
Published Apr 30, 2026
·Updated
OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
Affected Software
3 affected components
Wireshark Wireshark>=4.6.0<=4.6.4, >=4.4.0<=4.4.14
Wireshark Wireshark>=4.4.0<=4.4.14
Wireshark Wireshark>=4.6.0<=4.6.4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Wiresharkto a version that resolves this vulnerability.Fixed in 4.6.5
Event History
Apr 30, 2026
CVE Published
via MITRE·05:34 AM
Data Sourced
via MITRE·05:34 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeaknessAffected Software
Dec 24, 58314
Event
via FIRST·03:35 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-6521?
CVE-2026-6521 is classified as a denial of service vulnerability due to an infinite loop condition.
2
How do I fix CVE-2026-6521?
To mitigate CVE-2026-6521, upgrade your Wireshark installation to version 4.6.5 or later.
3
Which versions of Wireshark are affected by CVE-2026-6521?
CVE-2026-6521 affects Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14.
4
What type of attack vector is associated with CVE-2026-6521?
CVE-2026-6521 exploits an infinite loop in the OpenFlow v5 protocol dissector leading to potential service disruption.
5
Is there any workaround for CVE-2026-6521?
Currently, there are no known workarounds for CVE-2026-6521 apart from upgrading to a patched version.