CVE-2025-1492

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file

Scoring

Severity

HIGH

CVSS base score

7.8

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS probability

0.29%

CWE

CWE-674

Published

2025-02-20

Last modified

2026-03-27

Affected products

• Wireshark Foundation Wireshark
• Wireshark Foundation Wireshark

Weakness type

• CWE-674

Related vulnerabilities

• CVE-2026-22591 — Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)
• CVE-2026-19201 — Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser
• CVE-2026-69378 — Microsoft Exchange Server Denial of Service Vulnerability
• CVE-2026-73321 — XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser
• CVE-2026-11573 — QDomDocument::toByteArray() crashes when parsing svg file
• CVE-2026-17440 — IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
• CVE-2026-77465 — toml-node: Uncontrolled Recursion
• CVE-2026-84851 — Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

Markdown version · Browse all CVEs