Denial of Service Vulnerability in Wireshark by The Wireshark Foundation
CVE-2026-76929

4.7MEDIUM

Key Information:

Vendor

Wireshark
Status
Wireshark
Vendor
CVE Published:
19 August 2026

What is CVE-2026-76929?

A denial of service vulnerability exists in Wireshark's Pcapng file parser, affecting versions 4.6.0 through 4.6.7 and 4.4.0 to 4.4.18. This vulnerability can be exploited when processing malicious Pcapng files, potentially causing the application to crash and disrupt network analysis capabilities. Users are advised to update to the latest version as a precautionary measure to safeguard their systems against this issue.

Affected Version(s)

Wireshark 4.6.0 < 4.6.8

Wireshark 4.4.0 < 4.4.18

References

https://www.wireshark.org/security/wnpa-sec-2026-84.html
https://gitlab.com/wireshark/wireshark/-/work_items/21460

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Aisle Research (Dmitrijs Trizna, Luigino Camastra, Ze Sheng (O2Lab & TAMU), Igor Morgenstern)
.