CVE-2026-15168CWE-457

Use of Uninitialized Variable in Wireshark

Low · published July 8, 2026

CVSS v3.1
2.5
EPSS
0%
Percentile
2.2
In the wild
Unconfirmed
What it is

BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure

The record
Technical detail
CVSS v3.1
2.5 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00128 · 2.2th percentile
Weakness
CWE-457 · Use of Uninitialized Variable
Published
2026-07-08T21:47Z
EPSS history
Timeline
  • 08 JUL 21:47Z
    Use of Uninitialized Variable in Wireshark
    cvelistv5