CVE-2026-6519

A flaw was found in Wireshark. A remote attacker could exploit an infinite loop vulnerability within the MBIM (Mobile Broadband Interface Model) protocol dissector. This could lead to a denial of service (DoS) condition, making the application unresponsive.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid opening untrusted capture files in Wireshark. Additionally, the MBIM protocol dissector can be disabled to prevent processing of potentially malicious MBIM data. This can be achieved by navigating to Analyze -> Enabled Protocols... in Wireshark and unchecking the "MBIM" protocol, or by starting Wireshark from the command line with -d mbim==FALSE. Disabling the dissector may impact the ability to analyze legitimate MBIM traffic. A restart of Wireshark is required for the change to take effect.