PT-2026-21913 · Wireshark · Wireshark

Qi Kery + 1 · Published 2026-01-01 · Updated 2026-04-22 · CVE-2026-3201

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.4.0 through 4.4.13 Wireshark versions 4.6.0 through 4.6.3

Description The USB HID protocol dissector in Wireshark is susceptible to memory exhaustion, potentially leading to a denial of service. The issue occurs when processing specially crafted USB HID packets.

Recommendations Wireshark versions 4.4.0 through 4.4.13 should be updated to a later version. Wireshark versions 4.6.0 through 4.6.3 should be updated to a later version.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-1325

CWE-770

Related Identifiers

ALSA-2026:9666

AZL-78336

CVE-2026-3201

OESA-2026-1545

OESA-2026-1547

OESA-2026-1548

OESA-2026-1549

OESA-2026-1550

OPENSUSE-SU-2026:10274-1

OPENSUSE-SU-2026:20685-1

RHSA-2026:9666

SUSE-SU-2026:0810-1

SUSE-SU-2026:1169-1

SUSE-SU-2026:21559-1

Affected Products

Wireshark

References · 80

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3201.json · Exploit
• 🔥 https://gitlab.com/wireshark/wireshark/-/issues/20972 · Exploit
• https://osv.dev/vulnerability/OESA-2026-1545 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0962 · Security Note
• https://ubuntu.com/security/CVE-2026-3201 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-3201 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3201 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0810-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1550 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-9666.html · Vendor Advisory
• https://wireshark.org/security/wnpa-sec-2026-05.html · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1549 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1548 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1169-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10274-1 · Vendor Advisory