CVE-2026-3201: wireshark foundation wireshark
CVSS: 7.5v3.1HighAnalyzed
AliasesUBUNTU-CVE-2026-3201DEBIAN-CVE-2026-3201SUSE-SU-2026:0810-1
Published 25-02-2026Last modified 27-03-2026
Vulnerability summary
CVE-2026-3201 is a high (CVSS 7.5) vulnerability in wireshark foundation wireshark. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 19.1% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
7.5/10
010
High · v3.1 (NVD)EPSS score
0.28%
0%100%
Low · +0.09 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Advisory lineage
Upstream 0 · Downstream 4 · Related 2Timeline
- 25-02-2026PublishedVulnerability first disclosed.
- 27-03-2026Last modifiedVulnerability information updated.
Description
USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.5Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSources4 sources · 4.7–7.5
- CVE.orgCNA4.7MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.28%
Chance of exploitation in the next 30 days
Percentile
19%
Versus all other CVEs
30-day change
+0.09 pp
From 0.18% on 20-09-2026
20-09-202620-10-2026
EPSS score0.28%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (gitlab.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-1325Improperly Controlled Sequential Memory AllocationThe product manages a group of objects or resources and performs a separate memory allocation for each object, but it does not properly limit the total amount of memory that is consumed by all of the combined objects.
- CWE-770Allocation of Resources Without Limits or ThrottlingThe product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
Affected systems
Debian1 product
- wiresharkAll versions (No fix recorded) | < 4.4.14-0+deb13u1 | < 4.6.4-1
Opensuse1 product
- wireshark&distro=openSUSE Leap 15.6< 4.2.14-150600.18.38.1
Ubuntu1 product
- wiresharkAll versions (No fix recorded)
Wireshark1 product
- wireshark≥ 4.4.0, < 4.4.14 | ≥ 4.6.0, < 4.6.4
Wireshark foundation1 product
- wireshark≥ 4.6.0, < 4.6.4 | ≥ 4.4.0, < 4.4.14
5 vendors · 5 products
References
8 links- gitlab.com/wireshark/wireshark/-/issues/20972Issue TrackingPermissions RequiredExploitThird Party Advisory
