CVE-2015-8736

CVE-2015-8736 describes a stack-based buffer overflow vulnerability in the MP2T file parser (mp2t_find_next_pcr function in wiretap/mp2t.c) of Wireshark versions 2.0.x before 2.0.1. This flaw allows remote attackers to trigger a denial of service and application crash through a specially crafted file due to insufficient memory reservation. The vulnerability has a CVSSv3 score of 5.5 (Medium), indicating a local attack vector requiring user interaction (e.g., opening a malicious file) to achieve a high impact on availability. While the EPSS score is low, suggesting a low probability of exploitation, its FAUCET Risk Score is 75/100. Currently, there is no evidence of active exploitation, and it is not listed in the KEV catalog. Although no Metasploit or Nuclei modules exist, an exploit demonstrating the stack buffer overflow is available on ExploitDB (EDB-38997). Community discussion and media coverage for this CVE are minimal.