CVE-2025-1492

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.2.10 Wireshark versions 4.4.0 through 4.4.3

Description The issue allows denial of service via packet injection or crafted capture file, specifically affecting the Bundle Protocol and CBOR dissector in Wireshark. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

Recommendations For Wireshark versions 4.2.0 through 4.2.10, update to a version outside of this range to resolve the issue. For Wireshark versions 4.4.0 through 4.4.3, update to a version outside of this range to resolve the issue. As a temporary workaround, consider avoiding the use of the Bundle Protocol and CBOR dissector until a patch is available.