CVE-2026-95390
published 2026-09-29CVE-2026-95390: PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
PriorityP417medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.27%
19.2th percentile
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | wireshark | — | — |
| wireshark | wireshark | >= 4.6.0 < 4.6.9 | 4.6.9 |
| wireshark_foundation | wireshark | >= 4.6.0 < 4.6.9 | 4.6.9 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
wireshark: Wireshark: Denial of Service via crafted PEAK CAN TRC file
vendor_redhat·2026-09-29·CVSS 5.5
CVE-2026-95390 [MEDIUM] CWE-125 wireshark: Wireshark: Denial of Service via crafted PEAK CAN TRC file
wireshark: Wireshark: Denial of Service via crafted PEAK CAN TRC file
A flaw was found in Wireshark. By convincing a user to open a specially crafted PEAK CAN TRC trace file, an attacker can trigger an invalid memory access in the file parser. This issue causes the application to crash, resulting in a Denial of Service (DoS).
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Package: wireshark (Red Hat Enterprise Linux 10) - Not affected
Package: wireshark (Red Hat Enterprise Linux 6) - Not affected
Package: wireshark (Red Hat Enterprise Linux 7) - Not affected
Package: wireshark (Red Hat E
GitLab
NULL Pointer Dereference in Wireshark
vendor_gitlab·2026-09-29·CVSS 5.5
CVE-2026-95390 [MEDIUM] CWE-476 NULL Pointer Dereference in Wireshark
NULL Pointer Dereference in Wireshark
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
Affected products: Wireshark
Affected versions: >=4.6.0, <4.6.9 (affected)
Solution: Upgrade to version 4.6.9 or above
Credit: Daniel Birtwhistle
GHSA
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
ghsa_unreviewed·2026-09-29
CVE-2026-95390 [MEDIUM] CWE-476 PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-95390 wireshark: Wireshark: Denial of Service via crafted PEAK CAN TRC file
bugzilla·2026-09-29·CVSS 5.5
CVE-2026-95390 [MEDIUM] CVE-2026-95390 wireshark: Wireshark: Denial of Service via crafted PEAK CAN TRC file
CVE-2026-95390 wireshark: Wireshark: Denial of Service via crafted PEAK CAN TRC file
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
Bugzilla
CVE-2026-95390 wireshark: Wireshark: Denial of Service via crafted PEAK CAN TRC file [fedora-all]
bugzilla·2026-09-29·CVSS 5.5
CVE-2026-95390 [MEDIUM] CVE-2026-95390 wireshark: Wireshark: Denial of Service via crafted PEAK CAN TRC file [fedora-all]
CVE-2026-95390 wireshark: Wireshark: Denial of Service via crafted PEAK CAN TRC file [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
2026-09-29
Published