The vulnerability is a buffer over‑read in the MBIM protocol dissector. When a crafted MBIM packet is processed, the buffer read exceeds its bounds, causing Wireshark to crash. The crash leads to a denial of service for the user running the application. This weakness is characterized as CWE‑126, an unsafe buffer read that can corrupt control flow or memory.

Wireshark Foundation’s Wireshark software versions 4.6.0 through 4.6.8 and 4.4.0 through 4.4.18 are affected. Versions 4.6.9 and higher, as well as 4.4.19 and later, contain the fix.

The CVSS score is 5.5, indicating moderate severity. The EPSS score is below 1%, suggesting a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. The attack vector is likely local, as the attacker needs to supply a malicious MBIM packet to Wireshark; based on the description, it is inferred that the attacker would need to control traffic that Wireshark analyzes.