CVE-2026-76880

Out-of-bounds Write in Wireshark

Published Aug 19, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Description

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Analysis

Technical impact

The RRC protocol dissector in Wireshark has an out-of-bounds write that can crash the application, providing an out-of-bounds overwrite weakness (CWE-787). When exploited, the crash results in denial of service for users running the affected versions of the software.

Affected Systems

Wireshark Foundation’s Wireshark product versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18 are vulnerable. Users must upgrade to version 4.6.8 or later to address the flaw.

Risk and Exploitability

The CVSS score of 7.5 indicates a moderate to high severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The flaw can be triggered by feeding crafted RRC protocol packets to a running Wireshark instance, causing an out-of-bounds write that terminates the process. The attack vector is likely remote, as Wireshark can process network traffic captured from external sources.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Wireshark Foundation

Wireshark

unaffected

Version	Status	Constraints
`4.6.0`	affected	< 4.6.8
`4.4.0`	affected	< 4.4.18

Configuration 1 [-]

OR	cpe:2.3:a:wireshark:wireshark::::::::
	cpe:2.3:a:wireshark:wireshark::::::::

No data.

Vendor Product Versions

Wireshark

Version	Status	Scheme	Platform
`[4.6.0,4.6.8)`	affected	semver	—
`[4.4.0,4.4.18)`	affected	semver	—

Remediation

Vendor Solution

Upgrade to version 4.6.8 or above

OpenCVE Recommended Actions

Apply the vendor’s patch by upgrading Wireshark to version 4.6.8 or later.
If immediate upgrading is not possible, disable or skip the RRC protocol dissector in Wireshark’s preferences to prevent processing of malicious RRC packets.
Monitor Wireshark logs for unexpected crashes and ensure that only trusted traffic is fed into the application, using network segmentation or filtering controls as a temporary protective measure.

Generated by OpenCVE AI on August 20, 2026 at 08:15 UTC.

Tracking

Advisories

Source	ID	Title
Debian DSA	DSA-6471-1	wireshark security update

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.243% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://gitlab.com/wireshark/wireshark/-/work_items/21478
https://nvd.nist.gov/vuln/detail/CVE-2026-76880
https://www.cve.org/CVERecord?id=CVE-2026-76880
https://www.wireshark.org/security/wnpa-sec-2026-88.html

History

Sep 1, 2026 3:30 PM Affected versions updated View changes

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:wireshark:wireshark::::::::

Aug 21, 2026 4:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Aug 21, 2026 12:15 AM Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2026-76880 https://www.cve.org/CVERecord?id=CVE-2026-76880
Metrics	threat_severity `None`	threat_severity `Moderate`

Aug 20, 2026 12:30 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Wireshark Wireshark wireshark
Vendors & Products		Wireshark Wireshark wireshark

Aug 19, 2026 11:00 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Title		Out-of-bounds Write in Wireshark
Weaknesses		CWE-787
References		https://gitlab.com/wireshark/wireshark/-/work_items/21478 https://www.wireshark.org/security/wnpa-sec-2026-88.html
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`