Wireshark 4.6.6 Fixes Critical ROHC Dissector Crash Vulnerability

The Wireshark Foundation released version 4.6.6 on May 25, 2026, addressing a critical vulnerability in the ROHC dissector that could allow attackers to crash the application through malformed packet injection. This vulnerability, tracked as wnpa-sec-2026-51, was identified during fuzz testing and poses risks for users analyzing untrusted packet captures. Additionally, a global-buffer-overflow flaw affecting MACsec traffic analysis was also patched. The update includes various stability and compatibility fixes, particularly for Windows users, resolving issues that caused crashes in specific environments. Security teams are advised to upgrade to this version to mitigate risks associated with these vulnerabilities. The release emphasizes the importance of maintaining updated software in production monitoring environments.

Key Points: • Wireshark 4.6.6 addresses a critical ROHC dissector crash vulnerability. • Attackers can exploit this flaw via malformed packet injection, risking operational stability. • The update also resolves multiple stability issues, particularly for Windows compatibility.