Wireshark Fixes 19 Security Flaws Including Code Execution Through Profile Imports
Wireshark has released version 4.6.9 to patch 19 security vulnerabilities, including a critical flaw that could allow arbitrary code execution. The update addresses issues in protocol dissectors and capture-file readers that could be exploited by malicious network traffic.
Why it matters
As a standard tool for network administrators and security professionals, these vulnerabilities pose a significant risk to global network infrastructure and cybersecurity operations.
Wireshark has released version 4.6.9 to address 19 disclosed security vulnerabilities across its packet-analysis software, including a flaw that could allow arbitrary code execution when a user imports a malicious configuration profile.
The update tackles weaknesses in protocol dissectors, capture-file readers and the Sharkd analysis utility. Although many of the listed vulnerabilities can crash the affected component, others can trap processing in loops or leak memory, potentially disrupting analysis work and consuming system resources.
For network administrators and security teams, the significance extends beyond software reliability. Several advisories describe attacks delivered through malformed traffic or capture files—the same material analysts routinely examine while troubleshooting networks and investigating suspicious activity.
Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in