Description
Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Published: 2026-09-29
Score: 4.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Patch
AI Analysis

Impact

This vulnerability originates from a buffer over-read in Wireshark's Toshiba file parser. The over-read occurs in versions 4.6.0 through 4.6.8 and 4.4.0 through 4.4.18. It can cause the application to crash, leading to a denial of service for users unable to capture traffic. The weakness is linked to CWE-125 and CWE-126, which refer to out-of-bounds reads on buffers.

Affected Systems

Wireshark, maintained by the Wireshark Foundation, is affected when using the vulnerable Toshiba file parser. The specific vulnerable versions are 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18. Users running any of these releases should consider themselves impacted.

Risk and Exploitability

The CVSS score of 4.7 indicates moderate severity. EPSS is less than 1 percent, suggesting a low exploitation probability at this time, and the vulnerability is not listed in the CISA KEV catalog. Attackers would need to deliver a malicious or malformed Toshiba file to a user running a vulnerable Wireshark installation to trigger a crash. The current lack of public exploits and the low EPSS reduce immediate risk, but patching remains prudent.

Generated by OpenCVE AI on September 30, 2026 at 03:48 UTC.

Remediation

Vendor Solution

Upgrade to version 4.6.9 or above

OpenCVE Recommended Actions

  • Install Wireshark version 4.6.9 or later.
  • Restart the application after the upgrade to ensure the patch takes effect.
  • If an upgrade cannot be performed immediately, restrict or disable importing Toshiba files until remediation is available.

Generated by OpenCVE AI on September 30, 2026 at 03:48 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6541-1 wireshark security update
History

Tue, 06 Oct 2026 15:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

Wed, 30 Sep 2026 02:15:00 +0000

Type Values Removed Values Added
First Time appeared Wireshark
Wireshark wireshark
Vendors & Products Wireshark
Wireshark wireshark

Tue, 29 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 29 Sep 2026 13:15:00 +0000

Type Values Removed Values Added
Description Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Title Buffer Over-read in Wireshark
Weaknesses CWE-125
CWE-126
References
Metrics threat_severity

None

 cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Subscriptions

Wireshark Wireshark
cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published:

Updated: 2026-09-29T15:31:28.923Z

Reserved: 2026-09-23T05:41:45.659Z

Link: CVE-2026-96420

cve-icon Vulnrichment

Updated: 2026-09-29T15:31:21.603Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-29T10:17:16.790

Modified: 2026-10-06T14:42:55.050

Link: CVE-2026-96420

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-29T09:30:43Z

Links: CVE-2026-96420 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T04:00:15Z

Weaknesses