CVE-2025-13499CWE-824

CVE-2025-13499

High · published November 21, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
2.1
In the wild
Unconfirmed
What it is

⚡ A simple malformed Kafka packet can crash Wireshark, leaving your network analysis in the dust! Think of it like a restaurant where one bad order causes the entire kitchen to shut down — a single wrong dish brings everything to a halt! This means that an attacker could exploit this vulnerability to trigger a denial of service, preventing your team from analyzing crucial network traffic. If Wireshark crashes during an investigation, important data could be lost, and troubleshooting could become unnecessarily complicated.

Put simply

Think of it like a restaurant where one bad order causes the entire kitchen to shut down — a single wrong dish brings everything to a halt! The vulnerability lies in the Kafka dissector of Wireshark versions 4.6.0 and 4.4.0 to 4.4.10, where malformed packets can lead to a crash, disrupting the application's ability to analyze traffic.

What to do

This means that an attacker could exploit this vulnerability to trigger a denial of service, preventing your team from analyzing crucial network traffic. If Wireshark crashes during an investigation, important data could be lost, and troubleshooting could become unnecessarily complicated. To protect yourself from this mishap, upgrade to Wireshark version 4.6.1 or later immediately. Regularly check for updates to maintain the security and stability of your network analysis tools. You've got this! With these steps, you can keep your network analysis running smoothly and secure! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00127 · 2.1th percentile
Weakness
CWE-824 · Access of Uninitialized Pointer
Published
2025-11-21T11:15Z
Affected products (2)
ProductVersionsFixed in
wireshark/wireshark≥ 4.4.0, < 4.4.114.4.11
wireshark/wiresharkall versions—
References (2)
EPSS history
Timeline
  • 21 NOV 06:03Z
    Access of Uninitialized Pointer in Wireshark
    cvelistv5