Wireshark EUVD-2026-88713

Requires the victim to open a crafted capture file in the Toshiba ('compact router snoop') file format using a vulnerable Wireshark version (4.6.0-4.6.8 or 4.4.0-4.4.18); exploitation is local and needs user interaction (opening the file). Limiting factors: no network vector (AV:L), the malformed file must reach the specific Toshiba wiretap parse path giving high attack complexity (AC:H), and the outcome is only a process crash - no code execution, data exposure, or persistence.

This is a genuine but low-priority issue. The CVSS 3.1 vector (AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H, base 4.7) describes a purely local, availability-only denial of service: the analyst must be tricked into opening a crafted Toshiba-format capture file (UI:R), and the high attack complexity (AC:H) reflects that the malformed file must hit a specific parse path in the wiretap Toshiba reader. Impact is limited to a crash of the Wireshark process (A:H) with no confidentiality or integrity loss (C:N/I:N). No EPSS score, no CISA KEV listing, and no public POC are present in the input - exploitation status is 'no public exploit identified at time of analysis'. There are no conflicting signals to flag beyond one framing issue: the description leads with 'Toshiba file parser' but the CPE (cpe:2.3:a:wireshark_foundation:wireshark) and reference (wnpa-sec-2026-105) make clear this is Wireshark's Toshiba capture-file-format parser, not a Toshiba-branded product - 'Toshiba' is the file format, not the vendor. Real-world risk is low: a recoverable client-side crash requiring user interaction with an attacker-supplied file.

An attacker crafts a malformed Toshiba-format packet capture file and delivers it to a network analyst (e.g., as a 'please analyze this' attachment or shared trace). When the analyst opens it in a vulnerable Wireshark version, the wiretap Toshiba parser performs an out-of-bounds read and the application crashes. No public exploit code is identified at time of analysis; impact is limited to a recoverable denial of service of the analyst's Wireshark instance.