CVE-2026-9759 Details
Description
ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 allows denial of service
A denial-of-service vulnerability has been identified in the ROHC (Robust Header Compression) protocol dissector of Wireshark. This issue affects versions 4.6.0 through 4.6.5 and 4.4.0 through 4.4.15. The vulnerability arises when the uncompressed profile is used with large CID (Context Identifier) values, leading to a heap corruption issue. Specifically, the problem occurs when a packet's length matches the value length of the CID field, causing a NULL buffer to be created and manipulated improperly, which can crash the application.
Users can upgrade to Wireshark versions 4.6.6, 4.4.16 or later to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gitlab.com/wireshark/wireshark/-/work_items/21243 | [email protected] | Issue TrackingVendor Advisory |
| https://www.wireshark.org/security/wnpa-sec-2026-51.html | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| wireshark wireshark | >= 4.4.0, < 4.4.16 >= 4.6.0, < 4.6.6 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 1, 2026 | Initial Analysis | [email protected] |
| May 27, 2026 | New CVE Received | [email protected] |