{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5403.json"
      }
    ],
    "title": "wireshark: Heap-based Buffer Overflow in Wireshark",
    "tracking": {
      "current_release_date": "2026-06-30T03:38:41+00:00",
      "generator": {
        "date": "2026-06-30T03:38:41+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.0"
        }
      },
      "id": "CVE-2026-5403",
      "initial_release_date": "2026-04-30T23:04:03.523000+00:00",
      "revision_history": [
        {
          "date": "2026-04-30T23:04:03.523000+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-05-18T18:55:44+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-06-30T03:38:41+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 10",
                "product": {
                  "name": "Red Hat Enterprise Linux 10",
                  "product_id": "red_hat_enterprise_linux_10",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 10"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 6",
                "product": {
                  "name": "Red Hat Enterprise Linux 6",
                  "product_id": "red_hat_enterprise_linux_6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 6"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 7",
                "product": {
                  "name": "Red Hat Enterprise Linux 7",
                  "product_id": "red_hat_enterprise_linux_7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 7"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 8",
                "product": {
                  "name": "Red Hat Enterprise Linux 8",
                  "product_id": "red_hat_enterprise_linux_8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 8"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 9",
                "product": {
                  "name": "Red Hat Enterprise Linux 9",
                  "product_id": "red_hat_enterprise_linux_9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 9"
          },
          {
            "category": "product_version",
            "name": "wireshark",
            "product": {
              "name": "wireshark",
              "product_id": "wireshark",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/wireshark"
              }
            }
          },
          {
            "category": "product_version",
            "name": "wireshark-devel",
            "product": {
              "name": "wireshark-devel",
              "product_id": "wireshark-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/wireshark-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "wireshark-cli",
            "product": {
              "name": "wireshark-cli",
              "product_id": "wireshark-cli",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/wireshark-cli"
              }
            }
          },
          {
            "category": "product_version",
            "name": "wireshark.src",
            "product": {
              "name": "wireshark.src",
              "product_id": "wireshark.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/wireshark?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "wireshark-gnome",
            "product": {
              "name": "wireshark-gnome",
              "product_id": "wireshark-gnome",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/wireshark-gnome"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:wireshark"
        },
        "product_reference": "wireshark",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:wireshark-cli"
        },
        "product_reference": "wireshark-cli",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:wireshark-devel"
        },
        "product_reference": "wireshark-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark.src as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:wireshark.src"
        },
        "product_reference": "wireshark.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:wireshark"
        },
        "product_reference": "wireshark",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:wireshark-devel"
        },
        "product_reference": "wireshark-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-gnome as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:wireshark-gnome"
        },
        "product_reference": "wireshark-gnome",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark.src as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:wireshark.src"
        },
        "product_reference": "wireshark.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:wireshark"
        },
        "product_reference": "wireshark",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:wireshark-devel"
        },
        "product_reference": "wireshark-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-gnome as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:wireshark-gnome"
        },
        "product_reference": "wireshark-gnome",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark.src as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:wireshark.src"
        },
        "product_reference": "wireshark.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:wireshark"
        },
        "product_reference": "wireshark",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:wireshark-cli"
        },
        "product_reference": "wireshark-cli",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:wireshark-devel"
        },
        "product_reference": "wireshark-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark.src as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:wireshark.src"
        },
        "product_reference": "wireshark.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:wireshark"
        },
        "product_reference": "wireshark",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-cli as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:wireshark-cli"
        },
        "product_reference": "wireshark-cli",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark-devel as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:wireshark-devel"
        },
        "product_reference": "wireshark-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wireshark.src as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:wireshark.src"
        },
        "product_reference": "wireshark.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-5403",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2026-05-01T00:00:55.928345+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "red_hat_enterprise_linux_6:wireshark",
            "red_hat_enterprise_linux_6:wireshark-devel",
            "red_hat_enterprise_linux_6:wireshark-gnome",
            "red_hat_enterprise_linux_6:wireshark.src",
            "red_hat_enterprise_linux_7:wireshark",
            "red_hat_enterprise_linux_7:wireshark-devel",
            "red_hat_enterprise_linux_7:wireshark-gnome",
            "red_hat_enterprise_linux_7:wireshark.src",
            "red_hat_enterprise_linux_8:wireshark",
            "red_hat_enterprise_linux_8:wireshark-cli",
            "red_hat_enterprise_linux_8:wireshark-devel",
            "red_hat_enterprise_linux_8:wireshark.src",
            "red_hat_enterprise_linux_9:wireshark",
            "red_hat_enterprise_linux_9:wireshark-cli",
            "red_hat_enterprise_linux_9:wireshark-devel",
            "red_hat_enterprise_linux_9:wireshark.src"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2464271"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the SBC audio codec in Wireshark. This issue occurs when malformed packets are decoded from a pcap file or the network, causing a heap-based buffer overflow, resulting in a denial of service or potentially in code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wireshark: Heap-based Buffer Overflow in Wireshark",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue will cause a crash in Wireshark and potentially result in code execution. This flaw can only be exploited when a malformed pcap file is processed. Due to these reasons, this vulnerability has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "known_affected": [
          "red_hat_enterprise_linux_10:wireshark",
          "red_hat_enterprise_linux_10:wireshark-cli",
          "red_hat_enterprise_linux_10:wireshark-devel",
          "red_hat_enterprise_linux_10:wireshark.src"
        ],
        "known_not_affected": [
          "red_hat_enterprise_linux_6:wireshark",
          "red_hat_enterprise_linux_6:wireshark-devel",
          "red_hat_enterprise_linux_6:wireshark-gnome",
          "red_hat_enterprise_linux_6:wireshark.src",
          "red_hat_enterprise_linux_7:wireshark",
          "red_hat_enterprise_linux_7:wireshark-devel",
          "red_hat_enterprise_linux_7:wireshark-gnome",
          "red_hat_enterprise_linux_7:wireshark.src",
          "red_hat_enterprise_linux_8:wireshark",
          "red_hat_enterprise_linux_8:wireshark-cli",
          "red_hat_enterprise_linux_8:wireshark-devel",
          "red_hat_enterprise_linux_8:wireshark.src",
          "red_hat_enterprise_linux_9:wireshark",
          "red_hat_enterprise_linux_9:wireshark-cli",
          "red_hat_enterprise_linux_9:wireshark-devel",
          "red_hat_enterprise_linux_9:wireshark.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-5403"
        },
        {
          "category": "external",
          "summary": "RHBZ#2464271",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464271"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-5403",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-5403"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5403",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5403"
        },
        {
          "category": "external",
          "summary": "https://gitlab.com/wireshark/wireshark/-/issues/21103",
          "url": "https://gitlab.com/wireshark/wireshark/-/issues/21103"
        },
        {
          "category": "external",
          "summary": "https://www.wireshark.org/security/wnpa-sec-2026-16.html",
          "url": "https://www.wireshark.org/security/wnpa-sec-2026-16.html"
        }
      ],
      "release_date": "2026-04-30T23:04:03.523000+00:00",
      "remediations": [
        {
          "category": "workaround",
          "details": "If the SBC audio codec dissector is not being used, it can be disabled via the \"Enabled Protocols\" dialog box in the Wireshark GUI application. This will also disable the protocol dissector when using \"tshark\", the command line tool.\n\nSee the links below for instructions to disable a protocol in Wireshark, specifically the \"Control Protocol Dissection\" section and the \"disabled_protos\" configuration file option.\n\nhttps://www.wireshark.org/docs/wsug_html_chunked/ChCustProtocolDissectionSection.html\nhttps://www.wireshark.org/docs/wsug_html_chunked/ChAppFilesConfigurationSection.html",
          "product_ids": [
            "red_hat_enterprise_linux_10:wireshark",
            "red_hat_enterprise_linux_10:wireshark-cli",
            "red_hat_enterprise_linux_10:wireshark-devel",
            "red_hat_enterprise_linux_10:wireshark.src"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Will not fix",
          "product_ids": [
            "red_hat_enterprise_linux_10:wireshark",
            "red_hat_enterprise_linux_10:wireshark-cli",
            "red_hat_enterprise_linux_10:wireshark-devel",
            "red_hat_enterprise_linux_10:wireshark.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "red_hat_enterprise_linux_10:wireshark",
            "red_hat_enterprise_linux_10:wireshark-cli",
            "red_hat_enterprise_linux_10:wireshark-devel",
            "red_hat_enterprise_linux_10:wireshark.src",
            "red_hat_enterprise_linux_6:wireshark",
            "red_hat_enterprise_linux_6:wireshark-devel",
            "red_hat_enterprise_linux_6:wireshark-gnome",
            "red_hat_enterprise_linux_6:wireshark.src",
            "red_hat_enterprise_linux_7:wireshark",
            "red_hat_enterprise_linux_7:wireshark-devel",
            "red_hat_enterprise_linux_7:wireshark-gnome",
            "red_hat_enterprise_linux_7:wireshark.src",
            "red_hat_enterprise_linux_8:wireshark",
            "red_hat_enterprise_linux_8:wireshark-cli",
            "red_hat_enterprise_linux_8:wireshark-devel",
            "red_hat_enterprise_linux_8:wireshark.src",
            "red_hat_enterprise_linux_9:wireshark",
            "red_hat_enterprise_linux_9:wireshark-cli",
            "red_hat_enterprise_linux_9:wireshark-devel",
            "red_hat_enterprise_linux_9:wireshark.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important",
          "product_ids": [
            "red_hat_enterprise_linux_10:wireshark",
            "red_hat_enterprise_linux_10:wireshark-cli",
            "red_hat_enterprise_linux_10:wireshark-devel",
            "red_hat_enterprise_linux_10:wireshark.src",
            "red_hat_enterprise_linux_6:wireshark",
            "red_hat_enterprise_linux_6:wireshark-devel",
            "red_hat_enterprise_linux_6:wireshark-gnome",
            "red_hat_enterprise_linux_6:wireshark.src",
            "red_hat_enterprise_linux_7:wireshark",
            "red_hat_enterprise_linux_7:wireshark-devel",
            "red_hat_enterprise_linux_7:wireshark-gnome",
            "red_hat_enterprise_linux_7:wireshark.src",
            "red_hat_enterprise_linux_8:wireshark",
            "red_hat_enterprise_linux_8:wireshark-cli",
            "red_hat_enterprise_linux_8:wireshark-devel",
            "red_hat_enterprise_linux_8:wireshark.src",
            "red_hat_enterprise_linux_9:wireshark",
            "red_hat_enterprise_linux_9:wireshark-cli",
            "red_hat_enterprise_linux_9:wireshark-devel",
            "red_hat_enterprise_linux_9:wireshark.src"
          ]
        }
      ],
      "title": "wireshark: Heap-based Buffer Overflow in Wireshark"
    }
  ]
}