The vulnerability is an out‑of‑bounds read in the Kerberos protocol dissector that causes Wireshark to crash. Reaching the crash results in a denial of service without compromising data confidentiality or integrity. The weakness is identified as CWE‑125, an input validation issue where the dissection code fails to verify packet bounds before reading data.

Affected products are Wireshark by the Wireshark Foundation. The crash is triggered in Wireshark versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18. Any installation of these releases will be susceptible to malfunction when processing malformed Kerberos packets.

The CVSS score of 5.5 indicates a moderate severity. EPSS is not available, so the likelihood of exploitation cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote, via crafted network traffic that an attacker can send to a Wireshark instance to cause it to crash. The impact is localized to the Wireshark process, but for organizations that rely on real‑time packet capture, the crash could interrupt monitoring or forensic analysis.