Cyber Resilience

CVE-2024-8250

Memory Safety in Wireshark 4.0.0 – 4.0.17

Public PoCMemory Safety
Published
29 August 2024
Modified
03 November 2025
Patch / advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.0032 24th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2024-8250 is a high-severity Expired Pointer Dereference (CWE-825) vulnerability in Wireshark Wireshark. Its CVSS base score is 7.8 (High).

Operationally, ranked at the 24th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

CWE(s)

Related Threats

CVEs Like This One

CVE-2023-0667Same product: Wireshark Wireshark
CVE-2023-2854Same product: Wireshark Wireshark
CVE-2023-2856Same product: Wireshark Wireshark
CVE-2023-2855Same product: Wireshark Wireshark
CVE-2023-2857Same product: Wireshark Wireshark
CVE-2023-2858Same product: Wireshark Wireshark
CVE-2023-0668Same product: Wireshark Wireshark
CVE-2023-0666Same product: Wireshark Wireshark
CVE-2024-4853Same product: Wireshark Wireshark
CVE-2023-48692Shared CWE-787, CWE-825

Affected Assets

wireshark
wireshark
4.0.0 — 4.0.17 · 4.2.0 — 4.2.7

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-787

Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure-development practices directly prevent coding errors such as use-after-free while one CWE contributes only modestly to the full control.

ID.AM-08 partial match
prevents

Lifecycle management includes secure development and maintenance phases that reduce memory-safety defects.

ID.RA-01 partial match
prevents

Vulnerability identification processes can discover use-after-free flaws via scanning or analysis.

PR.PS-02 partial match
prevents

Routine patching and replacement can eliminate known instances of expired-pointer bugs.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

detects

Security testing can detect use-after-free issues, but removing this weakness alone does not fulfill the testing control.

prevents

Secure development lifecycle practices can include pointer lifetime and memory-management rules that reduce expired-pointer dereferences.

prevents

Application security requirements may mandate safe memory handling, but eliminating this single weakness does not satisfy the broader requirement.

prevents

Secure architecture and engineering principles can prescribe memory-safety patterns, yet fixing only this weakness does not achieve the control.

prevents

Secure coding standards directly address pointer lifetime and deallocation discipline, substantially mitigating expired-pointer dereference.

prevents

Change-management processes can require re-validation of memory safety after modifications, indirectly reducing the weakness.

References