CVE-2026-96422: Reachable Assertion in Wireshark
Published Sep 29, 2026
·Updated
Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Affected Software
1 affected component
Wireshark Wireshark>=4.6.0<=4.6.8, >=4.4.0<=4.4.18
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Wiresharkto a version that resolves this vulnerability.Fixed in 4.6.9
Event History
Sep 29, 2026
CVE Published
via MITRE·09:31 AM
Data Sourced
via MITRE·09:31 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to this denial-of-service issue?
Users running Wireshark versions 4.6.0 through 4.6.8 or 4.4.0 through 4.4.18 are affected.
2
What does an attacker need to do to trigger the crash?
The attack vector is local and requires user interaction. The available information does not specify the exact crafted input or interaction needed.
3
What is the impact if exploitation succeeds?
Successful exploitation can crash Wireshark, causing a denial of service. The provided severity vector indicates no confidentiality or integrity impact.