CVE-2026-5404
wireshark: Wireshark: Denial of service due to K12 RF5 file parser crash
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 1, 2026
Updated · July 2, 2026
Description
A flaw was found in Wireshark. This vulnerability allows a remote attacker to cause the application to crash, leading to a denial of service. The attacker can achieve this by tricking a user into opening a specially crafted K12 RF5 file, which triggers a parser error.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, users should exercise caution and avoid opening K12 RF5 files from untrusted or unknown sources. As Wireshark is a tool for network analysis, it is recommended to only process files obtained from trusted origins.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-1286 · Improper Validation of Syntactic Correctness of Input