{"id":"MGASA-2026-0493","summary":"Updated wireshark package fixes security vulnerabilities","details":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark.\n(CVE-2026-95386)\nHeap-based Buffer Overflow in Wireshark. (CVE-2026-95387)\nHeap-based Buffer Overflow in Wireshark. (CVE-2026-95388)\nHeap-based Buffer Overflow in Wireshark. (CVE-2026-95389)\nNULL Pointer Dereference in Wireshark. (CVE-2026-95390)\nUse After Free in Wireshark. (CVE-2026-95391)\nBuffer Over-read in Wireshark. (CVE-2026-95392)\nHeap-based Buffer Overflow in Wireshark. (CVE-2026-95393)\nUnchecked Input for Loop Condition in Wireshark. (CVE-2026-95394)\nMissing Release of Memory after Effective Lifetime in Wireshark.\n(CVE-2026-95395)\nThe Catapult DCT2000 protocol dissector could crash. (CVE-2026-96415)\nThe IEEE 802.11 protocol dissector could crash. (CVE-2026-96416)\nThe RF4CE protocol dissector could crash. (CVE-2026-96417)\nThe TIFF protocol dissector could go into an infinite loop.\n(CVE-2026-96418)\nImporting a crafted configuration profile could crash Wireshark or\nexecute arbitrary code. (CVE-2026-96419)\nThe Toshiba file parser could crash. (CVE-2026-96420)\nThe USB HID protocol dissector could go into an infinite loop and leak\nmemory. (CVE-2026-96421)\nThe Frame protocol metadissector could crash. (CVE-2026-96422)\nThe X11 protocol dissector could crash. (CVE-2026-96423)\n","modified":"2026-10-12T21:00:03.249629070Z","published":"2026-10-12T20:48:13Z","upstream":["CVE-2026-95386","CVE-2026-95387","CVE-2026-95388","CVE-2026-95389","CVE-2026-95390","CVE-2026-95391","CVE-2026-95392","CVE-2026-95393","CVE-2026-95394","CVE-2026-95395","CVE-2026-96415","CVE-2026-96416","CVE-2026-96417","CVE-2026-96418","CVE-2026-96419","CVE-2026-96420","CVE-2026-96421","CVE-2026-96422","CVE-2026-96423"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2026-0493.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=36456"},{"type":"WEB","url":"https://lists.debian.org/debian-security-announce/2026/msg00455.html"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-97"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21487"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-101"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21545"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-93"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21481"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-100"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21549"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21550"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-99"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21510"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-98"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21523"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-96"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21492"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-110"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21589"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-109"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21564"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-104"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21574"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-107"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21565"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-106"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21553"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-105"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21541"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-103"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21566"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-102"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21525"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-108"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21563"},{"type":"WEB","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/C5DQL3SVTFVDEEP3UXXLRF6HOVKTIQNJ/"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-94"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21501"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-95"},{"type":"REPORT","url":"https://gitlab.com/wireshark/wireshark/-/issues/21503"},{"type":"WEB","url":"https://www.wireshark.org/security/wnpa-sec-2026-92"}],"affected":[{"package":{"name":"wireshark","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/wireshark?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.9-1.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0493.json"}}],"schema_version":"1.9.0","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}