CVE-2026-95391: Use After Free in Wireshark
Published Sep 29, 2026
·Updated
ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service
Affected Software
1 affected component
Wireshark Wireshark>=4.6.0<=4.6.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Wiresharkto a version that resolves this vulnerability.Fixed in 4.6.9
Event History
Sep 29, 2026
CVE Published
via MITRE·09:33 AM
Data Sourced
via MITRE·09:33 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
Users running Wireshark versions 4.6.0 through 4.6.8 are affected when processing ZigBee ZCL protocol traffic or captures containing it. The impact described is a denial-of-service crash.
2
What does an attacker need to exploit this?
The attacker needs to cause a user to process malicious ZigBee ZCL protocol data in Wireshark. The CVSS vector indicates local attack vector, no privileges required, and user interaction required.
3
Is this a confidentiality or integrity issue?
No confidentiality or integrity impact is indicated. The reported impact is high availability impact due to a crash.