Skip to main content

Wireshark CVE-2026-76927

| EUVDEUVD-2026-63164 MEDIUM
NULL Pointer Dereference (CWE-476)
2026-08-19 cve@gitlab.com GHSA-wgph-5cfp-hvhq
Null Pointer Dereference Denial Of Service Suse
4.7
CVSS 3.1 · Vendor: gitlab
Share

Severity by source

Vendor (gitlab) PRIMARY
4.7 MEDIUM
AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
vuln.today AI
4.7 MEDIUM

Local vector because exploitation requires opening a crafted file; AC:H for precise H.245 malformation needed; UI:R mandatory; availability-only impact matches a dissector crash.

3.1 AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
4.0 AV:L/AC:H/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative

Primary rating from Vendor (gitlab).

CVSS VectorVendor: gitlab

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

2
Patch available
Aug 20, 2026 - 01:01 EUVD
Analysis Generated
Aug 19, 2026 - 23:31 vuln.today

DescriptionCVE.org

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

AnalysisAI

Null pointer dereference in Wireshark's H.245 protocol dissector crashes the application, enabling denial of service against versions 4.6.0-4.6.7 and 4.4.0-4.4.18. An attacker can trigger the crash by inducing a victim analyst to open a crafted packet capture file or by injecting malicious H.245 traffic into a live capture session. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Craft malformed H.245 capture file
Delivery
Deliver file to analyst via email or file share
Exploit
Analyst opens file in vulnerable Wireshark
Execution
H.245 dissector dereferences null pointer
Impact
Wireshark process crashes (DoS)
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires the victim to actively open a crafted packet capture file in Wireshark, or to capture live network traffic containing maliciously formed H.245 packets with Wireshark running. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Real-world risk is moderate-to-low. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario A threat actor crafts a packet capture file (.pcapng) containing a malformed H.245 message and distributes it to a target analyst under the guise of a legitimate network trace for review. When the analyst opens the file in an affected version of Wireshark, the H.245 dissector dereferences a null pointer and the application crashes, interrupting their analysis workflow. …
Remediation The primary remediation is to upgrade to a patched Wireshark release beyond the affected version ranges. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

Same weakness CWE-476 – NULL Pointer Dereference

View all
CVE-2016-0742 HIGH
7.5
CVE-2014-3470 MEDIUM
4.3
CVE-2017-3730 HIGH POC
7.5
CVE-2017-3169 CRITICAL POC
9.8
CVE-2016-4957 HIGH
7.5
CVE-2015-3194 HIGH
7.5
CVE-2026-21525 MEDIUM
6.2
CVE-2017-0016 MEDIUM
5.9

Same technique Null Pointer Dereference

View all
CVE-2016-0742 HIGH
7.5
CVE-2014-3470 MEDIUM
4.3
CVE-2017-3730 HIGH POC
7.5
CVE-2017-3169 CRITICAL POC
9.8
CVE-2016-4957 HIGH
7.5
CVE-2015-3194 HIGH
7.5
CVE-2026-21525 MEDIUM
6.2
CVE-2017-0016 MEDIUM
5.9

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 12 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Affected
SUSE Linux Enterprise Module for Desktop Applications 15 SP7 Affected

Share

CVE-2026-76927 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy