CVE-2026-6538: Stack-based Buffer Overflow in Wireshark
BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wiresharkto a version that resolves this vulnerability.Fixed in 4.6.5
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6538?
CVE-2026-6538 has been classified as a denial of service vulnerability due to a stack-based buffer overflow in Wireshark.
How do I fix CVE-2026-6538?
To address CVE-2026-6538, upgrade Wireshark to versions 4.6.5 or later for the 4.6.x branch or 4.4.15 or later for the 4.4.x branch.
Which versions of Wireshark are affected by CVE-2026-6538?
CVE-2026-6538 affects Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14.
What kind of attack does CVE-2026-6538 facilitate?
CVE-2026-6538 facilitates denial of service attacks by exploiting a buffer overflow in the BEEP protocol dissector.
When was CVE-2026-6538 disclosed?
CVE-2026-6538 was publicly disclosed in 2026, highlighting its impact on specific versions of Wireshark.