CVE-2026-76917

Heap-based Buffer Overflow in Wireshark

Published Aug 19, 2026 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Description

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Analysis

Technical impact

A heap‑based buffer overflow exists in Wireshark’s Bluetooth AVRCP profile protocol dissector. When malformed Bluetooth packets are processed, the overflow causes the program to crash, resulting in a denial‑of‑service condition that can interrupt packet capture or analysis sessions.

Affected Systems

The vulnerability affects Wireshark Foundation’s Wireshark product, specifically versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18. Any deployment using these releases with the Bluetooth AVRCP dissector enabled is exposed.

Risk and Exploitability

The CVSS score of 5.5 classifies the issue as moderate severity. The EPSS score of 0.00105 (less than 1%) is reported, and the vulnerability is not listed in CISA KEV, indicating no known active exploitation. The likely attack vector is inferred to be a crafted Bluetooth packet sent to a machine running Wireshark; an attacker able to inject such traffic could disrupt the capture process. The exploitation likelihood remains uncertain, but the impact of a crash is significant in operational environments.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Wireshark Foundation

Wireshark

unaffected

Version	Status	Constraints
`4.6.0`	affected	< 4.6.8
`4.4.0`	affected	< 4.4.18

Configuration 1 [-]

OR	cpe:2.3:a:wireshark:wireshark::::::::
	cpe:2.3:a:wireshark:wireshark::::::::

No data.

Vendor Product Versions

Wireshark

Version	Status	Scheme	Platform
`[4.6.0,4.6.8)`	affected	semver	—
`[4.4.0,4.4.18)`	affected	semver	—

Remediation

Vendor Solution

Upgrade to version 4.6.8 or above

OpenCVE Recommended Actions

Upgrade Wireshark to version 4.6.8 or later to apply the fix for the heap overflow.
If an upgrade cannot be performed immediately, disable or remove the Bluetooth AVRCP dissector to prevent crashes until the patch is applied.
Use network or Bluetooth access controls to limit external Bluetooth traffic to the Wireshark host, reducing the opportunity for an attacker to deliver malicious packets.

Generated by OpenCVE AI on August 21, 2026 at 04:52 UTC.

Tracking

Advisories

Source	ID	Title
Debian DSA	DSA-6471-1	wireshark security update

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.137% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://gitlab.com/wireshark/wireshark/-/work_items/21488
https://nvd.nist.gov/vuln/detail/CVE-2026-76917
https://www.cve.org/CVERecord?id=CVE-2026-76917
https://www.wireshark.org/security/wnpa-sec-2026-91.html

History

Sep 17, 2026 7:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Aug 31, 2026 7:30 PM Affected versions updated View changes

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:wireshark:wireshark::::::::

Aug 21, 2026 12:15 AM Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-787
References		https://nvd.nist.gov/vuln/detail/CVE-2026-76917 https://www.cve.org/CVERecord?id=CVE-2026-76917
Metrics	threat_severity `None`	threat_severity `Moderate`

Aug 20, 2026 1:15 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Wireshark Wireshark wireshark
Vendors & Products		Wireshark Wireshark wireshark

Aug 19, 2026 11:00 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Title		Heap-based Buffer Overflow in Wireshark
Weaknesses		CWE-122
References		https://gitlab.com/wireshark/wireshark/-/work_items/21488 https://www.wireshark.org/security/wnpa-sec-2026-91.html
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}`