PT-2025-48797 · Wireshark Foundation+2 · Wireshark+2

Published 2025-12-03 · Updated 2026-04-02 · CVE-2025-13946

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.4.0 through 4.4.11 Wireshark versions 4.6.0 through 4.6.1

Description The MEGACO dissector in Wireshark contains an infinite loop that can lead to a denial of service. The issue is triggered by the improper handling of MEGACO protocol data.

Recommendations Wireshark versions 4.4.0 through 4.4.11 should be updated to a later version. Wireshark versions 4.6.0 through 4.6.1 should be updated to a later version.

Exploit

Fix

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

AZL-71213

BDU:2026-03609

CVE-2025-13946

OESA-2026-1058

OESA-2026-1059

OESA-2026-1060

OESA-2026-1061

OESA-2026-1062

OESA-2026-1546

OPENSUSE-SU-2025:15799-1

OPENSUSE-SU-2026:20151-1

SUSE-SU-2025:4413-1

SUSE-SU-2025:4440-1

SUSE-SU-2026:0817-1

SUSE-SU-2026:1169-1

SUSE-SU-2026:20222-1

Affected Products

Debian

Red Os

Wireshark

References · 86

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13946.json · Exploit
• 🔥 https://gitlab.com/wireshark/wireshark/-/issues/20884 · Exploit
• https://osv.dev/vulnerability/OESA-2026-1061 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0817-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-71213 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11626 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1546 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-13946 · Security Note
• https://osv.dev/vulnerability/CVE-2025-13946 · Vendor Advisory
• https://wireshark.org/security/wnpa-sec-2025-08.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-13946 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20222-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-13946 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03609 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20151-1 · Vendor Advisory