CVE-2025-1492

Details

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file

Affected Packages

Wireshark

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1809) / Server 2019Windows 10 (1903)Windows 10 (1909)

Fixed in:

4.2.114.4.4

References

WEB

https://gitlab.com/wireshark/wireshark/-/issues/20373

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-1492

WEB

https://www.wireshark.org/security/wnpa-sec-2025-01.html