CVE-2026-15174

A flaw was found in Wireshark. A local attacker could exploit a crash in the Catapult DCT2000 protocol dissector. This vulnerability, requiring user interaction, leads to a denial of service, making the system unavailable.

Moderate: A denial of service vulnerability exists in Wireshark due to a crash in the Catapult DCT2000 protocol dissector. This flaw requires local user interaction, as an attacker must provide a specially crafted capture file for a user to open. The impact is limited to the availability of the Wireshark application, making the system unavailable only in the context of network traffic analysis.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To reduce the risk, avoid opening untrusted network capture files that may contain malicious Catapult DCT2000 protocol data. Ensure that Wireshark is used only with data from trusted sources to prevent potential application crashes.