Wireshark 4.6.9 Fixes 19 Vulnerabilities Including Code Execution Via Malicious Packet
Wireshark 4.6.9 and 4.4.19 patch 19 flaws, including code execution via a malicious profile.
Wireshark released 4.6.9 and 4.4.19 on September 23, fixing 19 vulnerabilities in protocol dissectors, capture-file parsers, Sharkd, and configuration-profile handling. The most serious issue, CVE-2026-96419, can crash Wireshark or potentially execute arbitrary code when a user imports a crafted profile; it affects 4.6.0 through 4.6.8 and 4.4.0 through 4.4.18. Other defects include crashes, infinite loops, memory leaks, and denial of service in dissectors such as ZigBee ZCL, SCTP, TIFF, USB HID, and IEEE C37.118, plus overflows in DICOM, LBMC, SMB, and etwdump. Wireshark says it is unaware of active exploitation and advises upgrading and not opening untrusted profiles or captures.
- CVE-2026-96419 may execute code when a crafted configuration profile is imported.
- Versions 4.6.0–4.6.8 and 4.4.0–4.4.18 are fixed in 4.6.9 and 4.4.19.
- Other flaws cause crashes, infinite loops, memory leaks, and denial of service.
- Extra fixes cover DICOM heap overwrite, integer overflows, and an etwdump stack overflow.
- Wireshark reports no active exploitation and urges avoiding untrusted captures.
- CVEs
- CVE-2026-96419
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-96419 | Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution | 7.8 | <1% | PoC |
From the original article
3 min read at cybersecuritynews.com
Wireshark has released version 4. 6. 9, a security-focused update that addresses 19 documented vulnerabilities across protocol dissectors, capture-file parsers, the Sharkd utility, and configuration-profile handling.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.