CVE-2024-4855

Use After Free in editcap

Use after free issue in editcap could cause denial of service via crafted capture file

Affected

Wireshark Foundation · editcap

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v3.1 GITLAB

3.6 LOWCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS

0.40% chance of exploitation in the next 30 days, 33rd percentile

Published

2024-05-14

Updated

2026-03-27

Proof-of-concept exploits (3)

• https://gitlab.com/wireshark/wireshark/-/issues/19782
• https://gitlab.com/wireshark/wireshark/-/issues/19783
• https://gitlab.com/wireshark/wireshark/-/issues/19784

Security advisories

• https://www.wireshark.org/security/wnpa-sec-2024-08.html

References

• CVE Record
• NVD entry