Wireshark’s 3GPP phone log file parser contains an out‑of‑bounds write that corrupts memory when it processes a malformed log file. The resulting buffer overflow causes the application to crash, which results in a denial of service for the running instance. The flaw does not allow attackers to read or exfiltrate data or execute arbitrary code, but it does interrupt service availability. The weakness is a classic buffer overflow, classified as CWE‑787.

The flaw affects Wireshark Foundation’s Wireshark product, specifically versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18. Users running any of these releases should verify their installed version and plan an upgrade.

The nominal CVSS base score of 4.7 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting lower mainstream exploitation risk. The vulnerability can be exercised by feeding a malicious 3GPP phone log file to Wireshark; this is typically a local action but could be leveraged remotely if the software is instructed to parse untrusted files from network sources. While the exact likelihood of exploitation is not documented, the impact is a service interruption for the affected instance.