TLS ECH Decryptor Crash in Wireshark Causes DoS

Publication date: 2026-07-08

Last updated on: 2026-07-08

Assigner: GitLab Inc.

Description

TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-08

Last Modified

2026-07-08

Generated

2026-07-09

AI Q&A

2026-07-09

EPSS Evaluated

N/A

NVD

CVE-2026-15165

Affected Vendors & Products

Vendor	Product	Version / Range
wireshark	wireshark	From 4.6.0 (inc) to 4.6.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

Executive Summary

This vulnerability is a crash in the TLS ECH decryptor component of Wireshark versions 4.6.0 to 4.6.6. It causes the application to crash, resulting in a denial of service.

Impact Analysis

The impact of this vulnerability is a denial of service, meaning that Wireshark can be made to crash and become unavailable when processing certain TLS ECH data.

Hi! I’m here to help you understand CVE-2026-15165. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70