CVE-2026-0961

Out-of-bounds Write in Wireshark

BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service

Affected

Wireshark Foundation · Wireshark

CVSS v3.1 NVD

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v3.1 GITLAB

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.21% chance of exploitation in the next 30 days, 10th percentile

Published

2026-01-14

Updated

2026-03-27

Proof-of-concept exploits (1)

• LielingAi/ZhiShi92★ · 2026-10-18

Security advisories

• https://gitlab.com/wireshark/wireshark/-/issues/20880
• https://www.wireshark.org/security/wnpa-sec-2026-01.html

References

• CVE Record
• NVD entry

Related

• CVE-2025-1162
• CVE-2025-1163
• CVE-2025-1164
• CVE-2025-1171
• CVE-2026-34621