CVE-2025-5601: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

7.8 CVSS

Description

Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file

CVSS Base Severity: HIGH

CVSS Base Score: 7.8

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vendor: Wireshark Foundation

Product: Wireshark

EPSS Score: 0.01% (probability of being exploited)

EPSS Percentile: 1.19% (scored less or equal to compared to others)

EPSS Date: 2025-06-05 (when was this score calculated)

2025-06-04 11:40:11 UTC
CVE

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark