Uncontrolled recursion in Wireshark's FC‑SWILS protocol dissector causes the application to crash when it processes certain packets, leading to a denial of service. This weakness is classified as CWE‑674 and CWE‑1286, both describing uncontrolled recursion that can exhaust system resources. The impact is limited to the Wireshark process; however, repeated crashes can disrupt network monitoring operations and affect the availability of critical network diagnostics.

Affected versions include Wireshark Foundation Wireshark versions 4.4.0 through 4.4.14 and 4.6.0 through 4.6.4. Administrators should verify that any installations outside these ranges are not impacted.

The CVSS score of 5.5 indicates moderate severity. The EPSS score of < 1% suggests a very low probability of exploitation, but the vulnerability can still be triggered by an attacker who can supply crafted FC‑SWILS traffic—most likely over an external network. Since this vulnerability is not listed in the CISA KEV catalog, there are no known active exploits, yet the possibility of local or remote exploitation remains if attackers can feed the vulnerable traffic into Wireshark. The attack vector is therefore inferred to be from malicious traffic that can be delivered to a running Wireshark instance.