A heap‑based buffer overflow exists in Wireshark’s Bluetooth AVRCP profile protocol dissector. When malformed Bluetooth packets are processed, the overflow causes the program to crash, resulting in a denial‑of‑service condition that can interrupt packet capture or analysis sessions.

The vulnerability affects Wireshark Foundation’s Wireshark product, specifically versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18. Any deployment using these releases with the Bluetooth AVRCP dissector enabled is exposed.

The CVSS score of 5.5 classifies the issue as moderate severity. The EPSS score is unavailable, and the vulnerability is not listed in CISA KEV, indicating no known active exploitation. The likely attack vector is inferred to be a crafted Bluetooth packet sent to a machine running Wireshark; an attacker able to inject such traffic could disrupt the capture process. The exploitation likelihood remains uncertain, but the impact of a crash is significant in operational environments.