The vulnerability is a heap‑based buffer overflow located in the IEEE 802.11 protocol dissector of Wireshark versions 4.6.0‑4.6.8 and 4.4.0‑4.4.18. The overflow causes a segmentation fault, terminating the application. The CVSS score of 5.5 indicates a medium severity and the impact is a denial of service, allowing an attacker to crash the program.

Affected systems include Wireshark Foundation’s Wireshark product for both the 4.6.x and 4.4.x release lines. Versions 4.6.0 through 4.6.8 and 4.4.0 through 4.4.18 lack the fix and are vulnerable.

The exploitation probability is low, with an EPSS score in the <1% range, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local or remote delivery of a malformed 802.11 capture file or traffic that triggers the dissection logic. No elevated privileges or code execution are required, limiting the impact to a service crash.