Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-30 | 2 | Disclosure2 |
| 2026-05-30 | 1 | Disclosure1 |
| 2026-06-01 | 2 | Disclosure2 |
Two critical flaws affect Wireshark's core dissection engine: zlib Decompression Crash (CVE-2026-6535) — Any protocol using zlib compression vulnerable LZ77 Decompression Crash (CVE-2026-6533) — Any protocol using LZ77 compression vulnerable
Post summary
Two critical Wireshark vulnerabilities have been disclosed that cause crashes when processing zlib or LZ77 compressed data, rendering all protocols utilizing these schemes vulnerable.
zlib and LZ77 decompression flaws (CVE-2026-6535, CVE-2026-6533) affect any compressed protocol, expanding the attack surface beyond individual dissectors. A single malformed zlib payload can corrupt the dissection engine's state.
Post summary
The text announces new zlib and LZ77 decompression flaws (CVE‑2026‑6535, CVE‑2026‑6533) that can corrupt the dissection engine's state when fed malformed payloads across any compressed protocol.
Two vulnerabilities target Wireshark's core dissection engine, not individual parsers: LZ77 Decompression Crash (CVE-2026-6533) — Compressed payloads corrupt the decompression pipeline zlib Decompression Crash (CVE-2026-6535) — Malformed zlib streams crash the engine
Post summary
Wireshark’s core dissection engine suffers two new CVEs: a crash caused by corrupted LZ77 compressed payloads and another by malformed zlib streams.
CVE-2026-6533 LZ77 Decompression Denial of Service in Wireshark 4.6.0-4.6.4 and 4.4.0-4.4.14 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6533
Post summary
The text highlights a denial‑of‑service vulnerability in Wireshark involving LZ77 decompression, with no mention of exploitation, patches, or PoC.
CVE-2026-6533 Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service https://www.cve.org/CVERecord?id=CVE-2026-6533
Post summary
The tweet announces CVE‑2026‑6533, a denial‑of‑service vulnerability in Wireshark's LZ77 decompression engine affecting specific versions, with no PoC, exploit, patch, or active exploitation data provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wireshark | wireshark | - | - | - |