Denial of Service Vulnerability in Wireshark Bluetooth AVRCP Profile
CVE-2026-76917

5.5MEDIUM

Key Information:

Vendor

Wireshark
Status
Wireshark
Vendor
CVE Published:
19 August 2026

What is CVE-2026-76917?

A vulnerability in the Bluetooth AVRCP Profile protocol dissector in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 could lead to a crash, resulting in denial of service. This flaw can be exploited by sending crafted packets to the dissector, prompting unexpected behaviors and interruptions to normal service. Users are advised to update to the latest version of Wireshark to mitigate this risk. More detailed information can be found in the security advisory provided by Wireshark.

Affected Version(s)

Wireshark 4.6.0 < 4.6.8

Wireshark 4.4.0 < 4.4.18

References

https://www.wireshark.org/security/wnpa-sec-2026-91.html
https://gitlab.com/wireshark/wireshark/-/work_items/21488

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Feng Xue
.