Wireshark Frame Protocol Metadissector Crash (DoS) 4.4.0-4.4.18, 4.6.0-4.6.8
CVE-2026-96422 Published on September 29, 2026

Reachable Assertion in Wireshark
Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

NVD

Vulnerability Analysis

CVE-2026-96422 is exploitable with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. Public availability of a proof of concept (POC) exploit exists for CVE-2026-96422. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
NONE
Availability Impact:
HIGH

Weakness Type

What is an assertion failure Vulnerability?

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

CVE-2026-96422 has been classified to as an assertion failure vulnerability or weakness.


Products Associated with CVE-2026-96422

Want to know whenever a new CVE is published for Wireshark? stack.watch will email you.

 

Affected Versions

Wireshark Foundation Wireshark: