The BEEP protocol dissector in Wireshark versions 4.6.0 through 4.6.4 and 4.4.0 through 4.4.14 contains a stack‑based buffer overflow, identified as CWE‑121 and CWE‑1286, that causes the application to crash. This flaw does not permit arbitrary code execution or privilege escalation; it simply allows a malicious BEEP packet to terminate the Wireshark process, resulting in a denial of service.

The vulnerability affects Wireshark from the Wireshark Foundation. All installations running versions 4.6.0–4.6.4 or 4.4.0–4.4.14 are impacted and must be updated before they can be considered secure.

The CVSS score of 5.5 suggests moderate risk. The EPSS score of less than 1% indicates a very low probability of exploitation, and the vulnerability is not listed in CISA KEV, indicating limited or no known exploitation. The attack vector is likely remote or local, depending on whether a crafted BEEP packet can be presented to a running Wireshark instance; the exploit requires no special privileges and results only in an application crash and loss of availability.