Denial of Service Vulnerability in Wireshark Bluetooth Protocol Dissector
CVE-2026-76922

5.5MEDIUM

Key Information:

Vendor

Wireshark
Status
Wireshark
Vendor
CVE Published:
19 August 2026

What is CVE-2026-76922?

A vulnerability in the Bluetooth BR/EDR FHS protocol dissector in Wireshark allows for a denial of service attack. This issue, present in versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18, enables an attacker to craft specific inputs, causing the dissector to crash. This can disrupt the service, causing impacted systems to become temporarily unavailable, significantly affecting the usability of the software. It is crucial for users to update to the latest version to mitigate this risk and ensure continued operational integrity.

Affected Version(s)

Wireshark 4.6.0 < 4.6.8

Wireshark 4.4.0 < 4.4.18

References

https://www.wireshark.org/security/wnpa-sec-2026-80.html
https://gitlab.com/wireshark/wireshark/-/work_items/21452

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Aisle Research (Dmitrijs Trizna, Luigino Camastra, Ze Sheng (O2Lab & TAMU), Igor Morgenstern)
.