CVE-2018-19623: In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash.

Security readout for executives and security teams

This flaw affects specific older Wireshark releases. A malicious packet or capture using LBMPDM parsing could crash Wireshark and, according to the CVE text, write arbitrary data near packet-scoped memory. The main business risk is disruption or unsafe analysis on systems processing untrusted packet captures. Exposure is most likely on analyst workstations, jump boxes, or automated systems running affected Wireshark versions that inspect untrusted live traffic or capture files. Prioritize remediation for security operations and engineering systems that process external packet captures. Broader enterprise urgency is lower unless Wireshark is embedded in automated analysis pipelines. Mitigation focus: Upgrade Wireshark using vendor security updates that include the LBMPDM fix.; Replace Wireshark 2.6.0-2.6.4 and 2.4.0-2.4.10 wherever found.; Treat untrusted packet captures as hostile until affected tools are updated..

Prepared

Jun 6, 2026, 22:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.