CVE-2026-6522

A flaw was found in Wireshark. The RPKI-Router protocol dissector contains an infinite loop. A remote attacker could exploit this by crafting a malicious RPKI-Router packet, leading to a denial of service (DoS) condition, making the Wireshark application unresponsive.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To reduce exposure, avoid opening untrusted network capture files. When analyzing live traffic, apply capture filters to exclude RPKI-Router protocol packets, or use display filters to prevent the vulnerable dissector from processing potentially malicious data. This operational control limits the application's exposure to crafted packets.