CVE-2026-95392— Buffer Over-read in Wireshark
Quick assessment
Affected
Wireshark Foundation Wireshark
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Wireshark 4.6.0 至 4.6.8 以及 4.4.0 至 4.4.18 版本中的 MBIM 协议分析器存在崩溃漏洞，可被用于发起拒绝服务攻击。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-95392
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Buffer Over-read in Wireshark
Source: CVE Program / CVE List V5
Vulnerability Description
MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
缓冲区上溢读取
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Wireshark Foundation | Wireshark | 4.6.0 ~ 4.6.9 | - |
|
II. Public POCs for CVE-2026-95392
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-95392
请登录查看更多情报信息。
Other References for CVE-2026-95392 (3)
Same Patch Batch · Wireshark Foundation · 2026-09-29 · 19 CVEs total
| CVE-2026-95389 | 8.1 HIGH | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-95387 | 8.1 HIGH | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96418 | 5.5 MEDIUM | Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark |
| CVE-2026-95388 | 5.5 MEDIUM | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96415 | 5.5 MEDIUM | Stack-based Buffer Overflow in Wireshark |
| CVE-2026-96416 | 5.5 MEDIUM | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96417 | 5.5 MEDIUM | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96421 | 5.5 MEDIUM | Improperly Controlled Sequential Memory Allocation in Wireshark |
| CVE-2026-96423 | 5.5 MEDIUM | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96422 | 5.5 MEDIUM | Reachable Assertion in Wireshark |
| CVE-2026-96419 | 5.5 MEDIUM | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshar |
| CVE-2026-95395 | 5.5 MEDIUM | Missing Release of Memory after Effective Lifetime in Wireshark |
| CVE-2026-95386 | 5.5 MEDIUM | Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark |
| CVE-2026-95391 | 5.5 MEDIUM | Use After Free in Wireshark |
| CVE-2026-95390 | 5.5 MEDIUM | NULL Pointer Dereference in Wireshark |
| CVE-2026-95394 | 4.7 MEDIUM | Unchecked Input for Loop Condition in Wireshark |
| CVE-2026-95393 | 4.7 MEDIUM | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96420 | 4.7 MEDIUM | Buffer Over-read in Wireshark |
IV. Related Vulnerabilities
Same product: Wireshark
-
CVE-2026-95391
Use After Free in Wireshark -
CVE-2026-95389
Heap-based Buffer Overflow in Wireshark -
CVE-2026-95386
Loop with Unreachable Exit Condition ('Infinite Loop') in Wi -
CVE-2026-95390
NULL Pointer Dereference in Wireshark -
CVE-2026-95395
Missing Release of Memory after Effective Lifetime in Wiresh
Same vendor: Wireshark Foundation
-
CVE-2026-95391
Use After Free in Wireshark -
CVE-2026-95389
Heap-based Buffer Overflow in Wireshark -
CVE-2026-95386
Loop with Unreachable Exit Condition ('Infinite Loop') in Wi -
CVE-2026-95390
NULL Pointer Dereference in Wireshark -
CVE-2026-95395
Missing Release of Memory after Effective Lifetime in Wiresh
Same weakness: CWE-126
V. Comments for CVE-2026-95392
No comments yet