CVE-2024-4855

A flaw was found in the editcap program distributed by Wireshark. A use-after-free may be triggered when a crafted packet trace file is processed with the editcap program using the --inject-secrets command line option, causing an application crash and resulting in a denial of service.

This flaw can only be triggered when the editcap program is used to process a crafted packet trace file with the --inject-secrets command line option.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Do not process untrusted packet trace files with the editcap program.