Wireshark sharkd CVE-2026-7378

sharkd is Wireshark's daemon component responsible for packet processing and network analysis. The vulnerability stems from a heap buffer overflow (CWE-122), a memory safety issue where data written to a dynamically allocated buffer exceeds its bounds. This occurs during packet parsing or capture file processing within sharkd's protocol dissectors. The local attack vector and requirement for user interaction to trigger the crash (opening a crafted capture file or connecting with a malicious packet stream) means the vulnerability cannot be exploited remotely without first delivering the malicious payload to the user's system.