CVE-2026-95395— Missing Release of Memory after Effective Lifetime in Wireshark
Quick assessment
Affected
Wireshark Foundation Wireshark
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
4.6.0 至 4.6.8 以及 4.4.0 至 4.4.18 版本中，IEEE C37.118 同步相量协议解析器存在内存泄漏漏洞，可被利用导致拒绝服务（DoS）
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-95395
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Missing Release of Memory after Effective Lifetime in Wireshark
Source: CVE Program / CVE List V5
Vulnerability Description
IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在移除最后引用时对内存的释放不恰当(内存泄露)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Wireshark Foundation | Wireshark | 4.6.0 ~ 4.6.9 | - |
|
II. Public POCs for CVE-2026-95395
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-95395
请登录查看更多情报信息。
Other References for CVE-2026-95395 (2)
Same Patch Batch · Wireshark Foundation · 2026-09-29 · 19 CVEs total
| CVE-2026-95389 | 8.1 HIGH | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-95387 | 8.1 HIGH | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96419 | 5.5 MEDIUM | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshar |
| CVE-2026-96418 | 5.5 MEDIUM | Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark |
| CVE-2026-96415 | 5.5 MEDIUM | Stack-based Buffer Overflow in Wireshark |
| CVE-2026-96416 | 5.5 MEDIUM | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96417 | 5.5 MEDIUM | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96421 | 5.5 MEDIUM | Improperly Controlled Sequential Memory Allocation in Wireshark |
| CVE-2026-96423 | 5.5 MEDIUM | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96422 | 5.5 MEDIUM | Reachable Assertion in Wireshark |
| CVE-2026-95392 | 5.5 MEDIUM | Buffer Over-read in Wireshark |
| CVE-2026-95386 | 5.5 MEDIUM | Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark |
| CVE-2026-95391 | 5.5 MEDIUM | Use After Free in Wireshark |
| CVE-2026-95390 | 5.5 MEDIUM | NULL Pointer Dereference in Wireshark |
| CVE-2026-95388 | 5.5 MEDIUM | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-95394 | 4.7 MEDIUM | Unchecked Input for Loop Condition in Wireshark |
| CVE-2026-95393 | 4.7 MEDIUM | Heap-based Buffer Overflow in Wireshark |
| CVE-2026-96420 | 4.7 MEDIUM | Buffer Over-read in Wireshark |
IV. Related Vulnerabilities
Same product: Wireshark
Same vendor: Wireshark Foundation
Same weakness: CWE-401
-
CVE-2026-102006
VxWorks 7 Memory allocation -
CVE-2026-102005
VxWorks Memory Allocation -
CVE-2026-87078
Net::IDN::Punycode versions from 2.302 before 2.590 for Perl -
CVE-2026-94627
vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer -
CVE-2026-73550
Envoy: HTTP/2 Discarded Host Header 200 GB Header-Copy OOM i
V. Comments for CVE-2026-95395
No comments yet