DEBIAN-CVE-2026-76889

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76881

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76924 Out-of-bounds Read in Wireshark

Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76923

An out-of-bounds read vulnerability exists in the Bluetooth HFP (Hands-Free Profile) protocol dissector of Wireshark , affecting versions 4.6.0–4.6.7 and 4.4.0–4.4.18 . A remote attacker can exploit this by tricking a user into opening a specially crafted capture file , causing Wireshark to crash...

CVE-2026-76923 Out-of-bounds Read in Wireshark

Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76922 NULL Pointer Dereference in Wireshark

Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76919

Wireshark is affected in versions 4.6.0–4.6.7 and 4.4.0–4.4.18. The ESS protocol dissector crashes due to a use of an uninitialized variable when processing malformed network traffic, enabling unauthenticated remote denial of service (CVSS 5.3). Exploitation in the wild is not documented in the p...

CVE-2026-76919 Use of Uninitialized Variable in Wireshark

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76918

SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76918 Heap-based Buffer Overflow in Wireshark

SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76917

A heap-based buffer overflow exists in the Bluetooth AVRCP (Audio/Video Remote Control Profile) protocol dissector in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 . A local user who processes a specially crafted Bluetooth AVRCP packet can trigger a crash of the Wireshark application, res...

CVE-2026-76917 Heap-based Buffer Overflow in Wireshark

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76880 Out-of-bounds Write in Wireshark

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76879

Wireshark's C12.22 protocol dissector contains a stack-based buffer overflow in versions 4.6.0–4.6.7 and 4.4.0–4.4.18. The flaw allows a remote, unauthenticated attacker to send crafted C12.22 protocol traffic causing the dissector to crash, resulting in denial of service (CVSS 7.5 HIGH, availabi...

CVE-2026-76879 Stack-based Buffer Overflow in Wireshark

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76888

Wireshark versions 4.6.0–4.6.7 and 4.4.0–4.4.18 have a flaw in the RDP protocol dissector that can be triggered by crafted RDP traffic, causing a crash and denial of service. CVSS 3.1 scores LOW (3.1). Exploitation details are not provided. Upgrade to a patched version per WNPASec-2026-67.

PT-2026-78859

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A crash in the Bluetooth HFP Profile protocol dissector allows for a denial of service. This is caused by an out-of-bounds read, which occurs when the...

PT-2026-78865

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A NULL pointer dereference in the X.509IF protocol dissector can lead to a crash, resulting in a denial of service. Recommendations Update Wireshark...

openSUSE 16: libwireshark18 / libwiretap15 / libwsutil16 / wireshark / etc (openSUSE-SU-2026:21534-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21534-1 advisory. Update to version 4.4.17. - CVE-2026-6867: SMB2 protocol dissector crash bsc1263727. - CVE-2026-7375: UDS protocol dissector infinite loop...

SUSE-SU-2026:23147-1 Security update for wireshark

This update for wireshark fixes the following issues: Update to version 4.4.17. - CVE-2026-6867: SMB2 protocol dissector crash bsc1263727. - CVE-2026-7375: UDS protocol dissector infinite loop bsc1263761. - CVE-2026-7376: Sharkd utility crash bsc1263760. - CVE-2026-7378: Sharkd utility crash...