epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5352.json"