This vulnerability is a heap‑based buffer overflow in the TTX Logger file parser of Wireshark. An attacker can supply a specially crafted TTX file that, when parsed, causes the application to crash, resulting in a denial of service. The weakness is identified by CWE‑122 and does not allow execution of arbitrary code.

Wireshark Foundation’s Wireshark product is affected for versions 4.6.0 through 4.6.7 inclusive. Users running these releases and after opening an attacker‑controlled TTX file risk encountering the crash.

The CVSS score of 4.7 indicates a moderate impact. EPSS is not available and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local file execution; an attacker must supply a malicious TTX file to the victim’s Wireshark instance. If the victim opens such a file, the parse routine will overflow a heap buffer and terminate the application, denying service to that user. Because the flaw is limited to parsing a specific file type, remote exploitation appears unlikely unless the attacker can deliver the file via a remote action such as email attachment.