CVE-2026-96422: Reachable Assertion in Wireshark
Published Sep 29, 2026
·Updated
Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Affected Software
3 affected components
Wireshark Wireshark>=4.6.0<=4.6.8, >=4.4.0<=4.4.18
Wireshark Wireshark>=4.4.0<4.4.19
Wireshark Wireshark>=4.6.0<4.6.9
Remediation
Information
Upgrade to version 4.6.9 or above
Patch Available
Event History
Sep 29, 2026
CVE Published
via MITRE·09:31 AM
Data Sourced
via MITRE·09:31 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:17 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Who is exposed to this denial-of-service issue?
Users running Wireshark versions 4.6.0 through 4.6.8 or 4.4.0 through 4.4.18 are affected.
2
What does an attacker need to do to trigger the crash?
The attack vector is local and requires user interaction. The available information does not specify the exact crafted input or interaction needed.
3
What is the impact if exploitation succeeds?
Successful exploitation can crash Wireshark, causing a denial of service. The provided severity vector indicates no confidentiality or integrity impact.