Denial of Service Vulnerability in Wireshark's 3GPP Phone Log Parser
CVE-2026-76920

4.7MEDIUM

Key Information:

Vendor

Wireshark
Status
Wireshark
Vendor
CVE Published:
19 August 2026

What is CVE-2026-76920?

A vulnerability in the 3GPP phone log file parser in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can lead to an unexpected crash of the application. This flaw may be exploited by specially crafted log files, causing the application to become unresponsive and affect user workflow. It highlights the importance of maintaining up-to-date network analysis tools to prevent service disruptions.

Affected Version(s)

Wireshark 4.6.0 < 4.6.8

Wireshark 4.4.0 < 4.4.18

References

https://www.wireshark.org/security/wnpa-sec-2026-81.html
https://gitlab.com/wireshark/wireshark/-/work_items/21454

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Aisle Research (Dmitrijs Trizna, Luigino Camastra, Ze Sheng (O2Lab & TAMU), Igor Morgenstern)
.