CVE-2026-76926

Reachable Assertion in Wireshark

Published Aug 19, 2026 CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed

Description

BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Analysis

Technical impact

The reachable assertion flaw in Wireshark’s BUSMASTER file parser causes an abnormal exit when processing certain file types, resulting in a denial of service that terminates the application and delays packet capture operations. The issue falls under CWE-617, indicating improper control flow handling.

Affected Systems

Wireshark Foundation Wireshark versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18 are vulnerable.

Risk and Exploitability

The CVSS score of 3.1 indicates low severity, and the EPSS score is not available so exploitation probability cannot be quantified. The vulnerability is not listed in CISA KEV. Based on the description, an attacker who can supply or trick Wireshark into opening a crafted BUSMASTER file can trigger the assertion, causing the application to crash, suggesting a local or remote file input attack vector.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Wireshark Foundation

Wireshark

unaffected

Version	Status	Constraints
`4.6.0`	affected	< 4.6.8
`4.4.0`	affected	< 4.4.18

Configuration 1 [-]

OR	cpe:2.3:a:wireshark:wireshark::::::::
	cpe:2.3:a:wireshark:wireshark::::::::

No data.

Vendor Product Versions

Wireshark

Version	Status	Scheme	Platform
`[4.6.0,4.6.8)`	affected	semver	—
`[4.4.0,4.4.18)`	affected	semver	—

Remediation

Vendor Solution

Upgrade to version 4.6.8 or above

OpenCVE Recommended Actions

Upgrade Wireshark to version 4.6.8 or later, which contains the fixed assertion in the BUSMASTER file parser.
If you must remain on an older release, restrict file import to trusted users and directories or run Wireshark in a sandboxed environment to limit the impact of a malicious file.
Continuously monitor Wireshark release notes for new security updates and patch the software promptly when available.

Generated by OpenCVE AI on August 20, 2026 at 07:52 UTC.

Tracking

Advisories

Source	ID	Title
Debian DSA	DSA-6471-1	wireshark security update

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.220% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://gitlab.com/wireshark/wireshark/-/work_items/21435
https://www.wireshark.org/security/wnpa-sec-2026-70.html

History

Sep 1, 2026 3:30 PM Affected versions updated View changes

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:wireshark:wireshark::::::::

Aug 21, 2026 3:30 AM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Aug 20, 2026 1:00 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Wireshark Wireshark wireshark
Vendors & Products		Wireshark Wireshark wireshark

Aug 19, 2026 11:15 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Title		Reachable Assertion in Wireshark
Weaknesses		CWE-617
References		https://gitlab.com/wireshark/wireshark/-/work_items/21435 https://www.wireshark.org/security/wnpa-sec-2026-70.html
Metrics		cvssV3_1 `{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'}`