CVE-2026-95395

A flaw was found in Wireshark. A memory leak in the IEEE C37.118 Synchrophasor protocol dissector can allow an attacker to cause a Denial of Service (DoS). By convincing a user to open a maliciously crafted packet capture file, the dissector fails to release allocated memory during packet dissection. This continuous memory consumption can lead to resource exhaustion, ultimately causing the application to crash or become unresponsive.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Operational mitigation can be achieved by avoiding the inspection of untrusted packet captures or capturing traffic on untrusted networks.

Additionally, the affected protocol parser can be disabled in the Wireshark user interface:

1. Open Wireshark and navigate to Analyze -> Enabled Protocols...
2. Search for "IEEE C37.118" or "Synchrophasor".
3. Uncheck the entry to disable the dissector, then click Save or OK.

Caveats: Disabling this protocol parser prevents Wireshark from decoding IEEE C37.118 Synchrophasor traffic; corresponding packets will be shown only as raw transport layer data (such as TCP or UDP). Restarting Wireshark or reloading the active capture file may be required for the configuration change to take effect.