A stack-based buffer overflow exists in the Catapult DCT2000 protocol dissector of Wireshark, allowing an attacker to crash the application and cause a denial of service. The vulnerability corresponds to CWE‑121 and CWE‑787 and delivers a moderate impact on availability, without providing remote code execution or data exfiltration.

Wireshark Foundation’s Wireshark software is affected. Versions 4.6.0 through 4.6.8 and 4.4.0 through 4.4.18 are vulnerable and should be upgraded to 4.6.9 or later.

The CVSS score of 5.5 indicates a moderate severity, while the EPSS score of less than 1% suggests a low probability of real-world exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attack vector requires the Wireshark process to parse a specially crafted Catapult DCT2000 packet, typically from a network source or a manipulated capture file.