Description
UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Published: 2026-08-19
Score: 4.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a heap‑based buffer overflow located in the UMTS FP protocol dissector of Wireshark. It is associated with CWE-122 and CWE-617. When Wireshark parses maliciously crafted UMTS FP packets, a buffer overrun occurs that can crash the application and bring the program to a stop. The result is a denial of service, which prevents the user from capturing or analysing network traffic until the software is restarted or updated.

Affected Systems

Wireshark releases 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18 are affected. The issue originates in the Wireshark Foundation product Wireshark.

Risk and Exploitability

The CVSS score of 4.7 indicates a moderate risk level. The EPSS score of < 1% shows a very low exploitation probability, and the vulnerability is not listed in the CISA KEV catalog, suggesting that known exploitation is limited or not confirmed. The likely attack vector is the receipt of a specially crafted UMTS FP packet; therefore, any environment that processes such packets could experience a crash without proper mitigation.

Generated by OpenCVE AI on August 22, 2026 at 02:04 UTC.

Remediation

Vendor Solution

Upgrade to version 4.6.8 or above

OpenCVE Recommended Actions

  • Upgrade Wireshark to version 4.6.8 or later to address the buffer overflow
  • If the UMTS FP protocol is not needed, disable its dissector to reduce the attack surface
  • Monitor application stability and system logs for crash indicators to verify the issue has been resolved

Generated by OpenCVE AI on August 22, 2026 at 02:04 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6471-1 wireshark security update
History

Mon, 31 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

Sat, 22 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-617
References
Metrics threat_severity

None

 threat_severity

Moderate

Thu, 20 Aug 2026 00:45:00 +0000

Type Values Removed Values Added
First Time appeared Wireshark
Wireshark wireshark
Vendors & Products Wireshark
Wireshark wireshark

Wed, 19 Aug 2026 22:45:00 +0000

Type Values Removed Values Added
Description UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Title Heap-based Buffer Overflow in Wireshark
Weaknesses CWE-122
References
Metrics cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H'}

Subscriptions

Wireshark Wireshark
cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published:

Updated: 2026-08-20T15:26:30.672Z

Reserved: 2026-08-19T22:34:49.932Z

Link: CVE-2026-76889

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-08-19T23:16:19.953

Modified: 2026-08-31T19:11:59.767

Link: CVE-2026-76889

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-19T22:35:39Z

Links: CVE-2026-76889 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-22T02:15:03Z

Weaknesses