CVE-2026-96415

A flaw was found in Wireshark. The Catapult DCT2000 protocol dissector is susceptible to a crash that results in a Denial of Service (DoS). An attacker could exploit this flaw by injecting malformed network packets or by tricking a user into opening a specially crafted capture file, causing the application to terminate unexpectedly.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Avoid processing packet capture files obtained from untrusted sources and avoid live packet capturing on untrusted networks.

Alternatively, disable the Catapult DCT2000 protocol dissector if it is not required:

1. In the Wireshark GUI, open Analyze -> Enabled Protocols, search for "Catapult DCT2000" (or "dct2000"), uncheck the checkbox, and click OK.
2. For command-line analysis using TShark, supply the command-line flag: tshark --disable-protocol dct2000

Caveat: Disabling the dissector prevents Wireshark and TShark from decoding Catapult DCT2000 network traffic, rendering it as raw payload data.