CVE-2024-4853

LOW

Published May 14, 2024 Modified Nov 3, 2025 CWE-762 CWE-787

Description

Memory handling issue in editcap could cause denial of service via crafted capture file

CVSS v3.1 Score

3.6

LOW

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

Weakness Type (CWE)

CWE-762 CWE-762

CWE-787 Out-of-bounds Write

Affected Products

Vendor	Product	Versions
wireshark	wireshark	3.6.0 — 3.6.23
wireshark	wireshark	4.0.0 — 4.0.15
wireshark	wireshark	4.2.0 — 4.2.5
fedoraproject	fedora	All
fedoraproject	fedora	All

References

Frequently Asked Questions

What is CVE-2024-4853? +

Memory handling issue in editcap could cause denial of service via crafted capture file It has a CVSS v3.1 base score of 3.6 (LOW).

How severe is CVE-2024-4853? +

CVE-2024-4853 has a CVSS v3.1 score of 3.6 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.

What products are affected by CVE-2024-4853? +

CVE-2024-4853 affects products from fedoraproject, wireshark, specifically: fedora, wireshark. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-4853? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-32503 8.4

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos …

CVE-2023-41056 8.1

Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in …

CVE-2024-2955 7.8

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or …

CVE-2025-48431 7.5

Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are …

CVE-2025-49080 7.5

There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with network access to …

CVE-2025-20189 7.4

A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers …