CVE-2026-15169

A flaw was found in Wireshark. This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted Universal Mobile Telecommunications System (UMTS) FP protocol packet. The flaw resides in the UMTS FP protocol dissector, which can lead to a crash of the Wireshark application. This can disrupt network analysis operations.

This Moderate impact denial of service flaw in Wireshark's UMTS FP protocol dissector can be triggered by processing a specially crafted packet. While exploitable by a remote attacker, successful exploitation requires a user to either open a malicious capture file or actively capture network traffic containing the crafted packet. This limits the attack surface to scenarios where Wireshark is actively used for network analysis.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, users should avoid opening or analyzing untrusted network capture files with Wireshark. Additionally, consider running Wireshark in a sandboxed environment to limit the potential impact of a crash. If Wireshark is not essential for daily operations, removing the wireshark package can eliminate the vulnerability, though this may affect other tools dependent on its libraries.