CVE-2025-11626CWE-835

CVE-2025-11626

Medium · published October 11, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
1.7
In the wild
Unconfirmed
What it is

MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00120 · 1.7th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2025-10-11T03:15Z
Affected products (2)
ProductVersionsFixed in
wireshark/wireshark≥ 4.2.0, < 4.2.144.2.14
wireshark/wireshark≥ 4.4.0, < 4.4.104.4.10
References (2)
https://gitlab.com/wireshark/wireshark/-/issues/20724 · [email protected]https://www.wireshark.org/security/wnpa-sec-2025-04.html · [email protected]
EPSS history
Timeline
  • 10 OCT 22:33Z
    Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
    cvelistv5