Skip to main content

Wireshark CVE-2026-76929

| EUVDEUVD-2026-63167 MEDIUM
Out-of-bounds Read (CWE-125)
2026-08-19 cve@gitlab.com GHSA-fg3x-px4w-mpc8
Information Disclosure Buffer Overflow Denial Of Service Suse
4.7
CVSS 3.1 · Vendor: gitlab
Share

Severity by source

Vendor (gitlab) PRIMARY
4.7 MEDIUM
AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
vuln.today AI
4.7 MEDIUM

Local file-open required (AV:L), specific malformed structure needed (AC:H), no privileges to open a file (PR:N), user must act (UI:R), crash only with no confidentiality or integrity impact confirmed.

3.1 AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
4.0 AV:L/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative

Primary rating from Vendor (gitlab).

CVSS VectorVendor: gitlab

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
Patch available
Aug 20, 2026 - 01:01 EUVD
Analysis Generated
Aug 19, 2026 - 23:32 vuln.today
CVE Published
Aug 19, 2026 - 23:16 cve.org
MEDIUM 4.7

DescriptionCVE.org

Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

AnalysisAI

Pcapng file parser crash in Wireshark 4.6.0-4.6.7 and 4.4.0-4.4.18 enables denial of service via a locally-opened malformed capture file. Rooted in CWE-125 (Out-of-Bounds Read), the parser reads beyond an allocated buffer boundary when processing certain pcapng structures, causing application termination. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Craft malformed pcapng file with boundary-violating block
Delivery
Deliver file to target analyst via email or file share
Exploit
Analyst opens file in affected Wireshark version
Execution
Pcapng parser performs out-of-bounds read (CWE-125)
Persist
Wireshark process crashes
Impact
Analysis session terminated (DoS)
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The target must open a specially crafted pcapng file using an affected version of Wireshark (4.6.0-4.6.7 or 4.4.0-4.4.18) on a local system. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment CVSS base score of 4.7 (Medium) accurately reflects the constrained exploitability profile: AV:L requires local file access, AC:H indicates specific file structure preconditions must be satisfied, UI:R mandates active user interaction, and impact is limited exclusively to availability (A:H) with no confidentiality or integrity effect. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker crafts a malformed pcapng capture file engineered to trigger the out-of-bounds read in Wireshark's parser and distributes it via email attachment, file share, or a deceptive download site targeting network analysts. When a user on an affected Wireshark version (4.6.0-4.6.7 or 4.4.0-4.4.18) opens the file for analysis, the pcapng dissector performs an invalid memory read, crashing Wireshark and potentially disrupting an active forensic or incident-response session. …
Remediation Upgrade to a Wireshark release beyond the affected ranges - consult the official security advisory at https://www.wireshark.org/security/wnpa-sec-2026-84.html for the exact patched version numbers, which were not independently confirmed from the input data (patch available per vendor advisory). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

Same weakness CWE-125 – Out-of-bounds Read

View all
CVE-2014-0160 HIGH POC
7.5
CVE-2016-5198 HIGH POC
8.8
CVE-2025-5777 CRITICAL POC
9.3
CVE-2016-1646 HIGH POC
8.8
CVE-2017-5030 HIGH POC
8.8
CVE-2016-4523 HIGH
7.5
CVE-2024-48456 HIGH POC
7.5
CVE-2024-48457 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 12 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Affected
SUSE Linux Enterprise Module for Desktop Applications 15 SP7 Affected

Share

CVE-2026-76929 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy