OSV-2022-867

Heap-buffer-overflow in get_utf_8_string

No score

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51090

Crash type: Heap-buffer-overflow READ 1
Crash state:
get_utf_8_string
dissect_form_urlencoded
call_dissector_work

What each source reports

OSV No score

Heap-buffer-overflow in get_utf_8_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51090

Crash type: Heap-buffer-overflow READ 1
Crash state:
get_utf_8_string
dissect_form_urlencoded
call_dissector_work

Record: OSV-2022-867
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` OSS-Fuzz	Listed versions, plus commit ranges v4.1.0v4.1.1rc0v4.2.0rc0v4.3.0rc0v4.2.0rc1 Show 45 moreShow less v4.2.0rc2wireshark-4.2.0rc2v4.2.0rc3v4.2.0v4.2.1rc0wireshark-4.2.0v4.2.1v4.2.2rc0wireshark-4.2.1v4.2.2v4.2.3rc0wireshark-4.2.2v4.2.3v4.2.4rc0wireshark-4.2.3v4.2.4v4.2.5rc0wireshark-4.2.4v4.2.5v4.2.6rc0wireshark-4.2.5v4.3.0rc1v4.2.6v4.2.7rc0wireshark-4.2.6v4.3.0v4.3.1rc0v4.3.1v4.3.2rc0v4.4.0rc0v4.5.0rc0v4.4.0rc1v4.2.7v4.2.8rc0v4.4.0v4.4.1rc0wireshark-4.2.7wireshark-4.4.0v4.2.8v4.2.9rc0v4.4.1v4.4.2rc0wireshark-4.2.8wireshark-4.4.1v4.2.10rc0	None known

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2022-867 is a vulnerability with no CVSS score yet in wireshark, published September 9, 2022. No source lists public exploit code. No source names a fixed version.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=51090

This page doesn't list everything

Left out here: 118 versions. The JSON record has them.