BaseFortify

Publication date: 2025-11-21

Last updated on: 2025-12-31

Assigner: GitLab Inc.

Description

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-21

Last Modified

2025-12-31

Generated

2026-07-06

AI Q&A

2025-11-21

EPSS Evaluated

2026-07-05

NVD

CVE-2025-13499

Affected Vendors & Products

Vendor	Product	Version / Range
wireshark	wireshark	From 4.4.0 (inc) to 4.4.11 (exc)
wireshark	wireshark	4.6.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-824	The product accesses or uses a pointer that has not been initialized.

Attack-Flow Graph

Executive Summary

This vulnerability is a crash in the Kafka protocol dissector component of Wireshark versions 4.6.0 and 4.4.0 to 4.4.10. It can be triggered to cause the application to crash, resulting in a denial of service.

Impact Analysis

The vulnerability can cause Wireshark to crash, leading to a denial of service. This may disrupt network analysis or monitoring activities that rely on Wireshark.

Hi! I’m here to help you understand CVE-2025-13499. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70