CVE Database›Document archive›CVE-2026-5404

CVE-2026-5404

wireshark: Wireshark: Denial of service due to K12 RF5 file parser crash

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 1, 2026

Updated · July 2, 2026

Description

A flaw was found in Wireshark. This vulnerability allows a remote attacker to cause the application to crash, leading to a denial of service. The attacker can achieve this by tricking a user into opening a specially crafted K12 RF5 file, which triggers a parser error.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, users should exercise caution and avoid opening K12 RF5 files from untrusted or unknown sources. As Wireshark is a tool for network analysis, it is recommended to only process files obtained from trusted origins.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-1286 · Improper Validation of Syntactic Correctness of Input