Wireshark 4.6.8 patches 28 security bugs, nine in file parsers
Wireshark 4.6.8 fixes 28 security bugs, including nine crash-prone capture file parsers, misdecoded 5G fields, and memory-safety issues.
Wireshark 4.6.8 fixes 28 security bugs spanning advisories wnpa-sec-2026-64 through wnpa-sec-2026-91, including nine crash bugs in file parsers such as pcapng, Endace ERF and Tektronix K12xx that trigger when opening capture files. Fixes cover dissectors for RDP, SSH, Kerberos, H.245, CMS, C12.22 and several Bluetooth protocols, plus unnumbered memory-safety issues like a stack buffer overflow in the K12/RF5 writer. The release also corrects eight misdecoded 5G NAS/5GSM fields and moves the Unix extcap path to /usr/libexec/wireshark/extcap.
- Nine crash bugs fire when opening saved capture files, with no network attacker involvement required
- Dissector fixes cover RDP, SSH, Kerberos, H.245, CMS, C12.22 and Bluetooth protocols
- Two bugs crash sharkd, exposing scripted capture-processing workflows
- Eight 5G NAS/5GSM fields were silently misdecoded, including UE security capability
- Several memory-safety fixes ship without wnpa advisory numbers, so advisory counts understate the release
- Vendors
- Wireshark
From the original article
2 min read at helpnetsecurity.com
Wireshark 4. 6. 8 fixes 28 security bugs in the protocol analyzer, and nine of them fire when someone opens a saved capture file.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.