CVE-2017-9616: Wireshark

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box function in epan/dissectors/file-mp4.c.

Affected products

• Wireshark Wireshark: version 2.2.7 only

Published 2017-06-14. Last modified 2026-06-17.