CVE-2020-25863

PoC —

CVSS 3.1

7.5 high

EPSS

5%p92

Published

Oct 6, 2020 (Oct 6, 2020)

Modified

Jun 17, 2026

Description

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was addressed in epan/dissectors/packet-multipart.c by correcting the deallocation of invalid MIME parts.

Vendors: wireshark fedoraproject opensuse debian oracle
Products: wireshark, fedora, leap, debian linux, zfs storage appliance firmware
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (4.9%)

In the news0 stories

No ingested article mentions this CVE yet.