CVE-2025-1492

Summary

CVE-2025-1492 is a denial-of-service vulnerability affecting Wireshark versions 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10. The issue lies in the Bundle Protocol and CBOR dissector. A maliciously crafted packet or capture file can trigger a crash, leading to a denial of service situation. This vulnerability can be exploited through packet injection or using a specially crafted capture file. Wireshark users are advised to update to the latest versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.