The Wireshark Foundation has officially released Wireshark 4.6.2, the latest maintenance update for the world’s most popular network protocol analyzer.
This release focuses on addressing critical security vulnerabilities, resolving a significant compatibility regression introduced in the previous version, and updating support for a wide range of network protocols.
Critical Security and Stability Fixes
Security remains a primary focus in this update, with the developers patching two vulnerabilities that could cause application crashes.
These issues, identified in the HTTP3 and MEGACO dissectors, pose a risk to users analyzing malicious or malformed network traffic.
By triggering these crashes, an attacker could potentially disrupt network analysis workflows.
In addition to security patches, Wireshark 4.6.2 resolves a major ABI (Application Binary Interface) compatibility issue.
The previous release, version 4.6.1, inadvertently introduced an API change that broke compatibility with plugins built for Wireshark 4.6.0.
This update restores the expected behavior, ensuring that plugins developed for the 4.6.0 branch function correctly without requiring recompilation or modification.
The following table details the security vulnerabilities addressed in this release:
| Advisory ID | Vulnerability Type | Affected Component | Issue Tracker |
|---|---|---|---|
| wnpa-sec-2025-07 | Dissector crash | HTTP3 | Issue 20860 |
| wnpa-sec-2025-08 | Infinite loop | MEGACO | Issue 20884 |
This release includes several targeted bug fixes to improve the application’s overall stability.
Notable corrections include a fix for a stack buffer overflow in the wiretap/ber module.c file, specifically within the ber_open function, that improves file-handling safety.
The team also addressed an issue where Omnipeek files were not working correctly in version 4.6.1, restoring access to these capture file formats. Additionally, a naming inconsistency in the base32 encoding function was rectified.
Protocol support has been updated for a variety of standards, ensuring accurate dissection of modern network traffic.
Updated protocols in this release include ATM PW, COSEM, COTP, DECT NR+, GTP, HTTP3, IEEE 802.15.4, ISIS HELLO, ISOBUS, MAC-LTE, MAUSB, MEGACO, MPEG DSM-CC, OsmoTRXD, PTP, RLC, SAPDIAG, and SMTP.
For Windows users, the installer now ships with an updated Visual C++ Redistributable (version 14.44.35112), replacing the older 14.40.33807 version included in previous installers.
Wireshark 4.6.2 is available for immediate download. Users running prior versions are encouraged to upgrade to ensure they have the latest security protections and protocol definitions.
Find this Story Interesting! Follow us on Google News, LinkedIn, and X to Get More Instant Updates
%20(1).webp?fit=1600,900&ssl=1&description=This release focuses on addressing critical security vulnerabilities, resolving a significant compatibility regression introduced in the previous version){kind=link}