CVE-2026-6526

A flaw was found in Wireshark, a network protocol analyzer. By processing a specially crafted Real-Time Streaming Protocol (RTSP) packet, a remote attacker could cause the Wireshark application to crash, leading to a denial of service. This vulnerability affects the RTSP protocol dissector.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Users can reduce exposure by avoiding the analysis of untrusted network capture files or live network traffic from untrusted sources. To specifically prevent the vulnerable RTSP dissector from processing packets, it can be disabled within Wireshark's preferences. Navigate to 'Analyze' -> 'Enabled Protocols...' and uncheck the 'RTSP' protocol. Disabling this protocol may impact the ability to analyze legitimate RTSP traffic.