CVE-2023-0666
Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.
Date published : 2023-06-06
https://www.debian.org/security/2023/dsa-5429
https://gitlab.com/wireshark/wireshark/-/issues/19085