A NULL pointer dereference occurs while parsing the H.245 protocol in Wireshark 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18, causing the application to crash. The vulnerability leads to a denial of service for users running the affected versions and is identified as CWE‑476.

The Wireshark Foundation’s Wireshark product is affected. Users running any of the following versions are vulnerable: 4.6.0–4.6.7 and 4.4.0–4.4.18. Versions 4.6.8 and later, as well as the latest 4.4 series past 4.4.18, contain the fix.

The CVSS score of 4.7 indicates moderate severity. EPSS data is not available, and the vulnerability is not listed in CISA’s KEV catalog. The attack likely requires an attacker to supply crafted H.245 packets—either through a malicious capture file or by manipulating traffic seen by Wireshark—so it is a local or captured‑traffic‑based vector rather than a remote network attack. Users who routinely analyze H.245 traffic or load untrusted packet captures are at higher risk.