CVE-2026-7378 Heap-based Buffer Overflow in Wireshark

🗓️ 30 Apr 2026 05:04:25Reported by GitLabType

Wireshark heap overflow crashes shark daemon and causes denial of service in versions four six and four four.

Reporter	Title	Published	Views	Family All 63
ATTACKERKB	CVE-2026-7378	30 Apr 202605:04	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2026-1904)	16 Jul 202600:00	–	nessus
Tenable Nessus	Debian dsa-6249 : libwireshark-data - security update	7 May 202600:00	–	nessus
Tenable Nessus	openSUSE 16: libwireshark18 / libwiretap15 / libwsutil16 / wireshark / etc (openSUSE-SU-2026:21534-1)	7 Aug 202600:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : wireshark (SUSE-SU-2026:2203-1)	2 Jun 202600:00	–	nessus
Tenable Nessus	SUSE SLED15: libwireshark19 / libwiretap16 / libwsutil17 / wireshark / etc (SUSE-SU-2026:3501-1)	6 Aug 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-7378	30 Apr 202600:00	–	nessus
Amazon	Medium: wireshark	7 Jul 202600:00	–	amazon
AlpineLinux	CVE-2026-7378	30 Apr 202605:04	–	alpinelinux
BDU FSTEC	The vulnerability of the sharkd software interface, a traffic analyzer for computer networks developed by Wireshark, allows a hacker to cause a service failure.	31 Jul 202600:00	–	bdu_fstec

[
  {
    "vendor": "Wireshark Foundation",
    "product": "Wireshark",
    "versions": [
      {
        "version": "4.6.0",
        "status": "affected",
        "lessThan": "4.6.5",
        "versionType": "semver"
      },
      {
        "version": "4.4.0",
        "status": "affected",
        "lessThan": "4.4.15",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wireshark	www.wireshark.org/security/wnpa-sec-2026-49.html
gitlab	www.gitlab.com/wireshark/wireshark/-/work_items/21207

30 Apr 2026 05:04Current

CVSS 3.15.5

EPSS0.00193

CWE-122