CVE-2026-19695

Stack-based Buffer Overflow in Wireshark

4.7 MediumFix available

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: High
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.12%Unchanged since Aug 13, 2026

What each source reports

CVE List Score used 4.7

Stack-based Buffer Overflow in Wireshark

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

Record: CVE-2026-19695
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-121
Updated: 2026-11-02

EUVDEUVD-2026-57744 4.7

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

Record: EUVD-2026-57744
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-7xc8-pfc8-qj6v 4.7

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

Record: GHSA-7xc8-pfc8-qj6v
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-121
Updated: 2026-11-02

NVD 4.7

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

Record: CVE-2026-19695
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-121
Updated: 2026-11-02

OSV 4.7

Stack-based Buffer Overflow in Wireshark

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

Record: CVE-2026-19695
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-121
Updated: 2026-11-02

OSVDEBIAN-CVE-2026-19695 5.5

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

Record: DEBIAN-CVE-2026-19695
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 5 moreShow less

OSVUBUNTU-CVE-2026-19695 4.7

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

Record: UBUNTU-CVE-2026-19695
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVopenSUSE-SU-2026:11579-1 No score

libwireshark19-4.6.8-2.1 on GA media

These are all security issues fixed in the libwireshark19-4.6.8-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:11579-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:22014-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.4.18:

CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
CVE-2026-76884: ERF file parser crash (bsc#1275834).
CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
CVE-2026-76890: Sharkd utility crash (bsc#1275841).
CVE-2026-76891: Sharkd utility crash (bsc#1275844).
CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html

Record: openSUSE-SU-2026:22014-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24013-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.4.18:

CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
CVE-2026-76884: ERF file parser crash (bsc#1275834).
CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
CVE-2026-76890: Sharkd utility crash (bsc#1275841).
CVE-2026-76891: Sharkd utility crash (bsc#1275844).
CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html

Record: SUSE-SU-2026:24013-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4379-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.6.8:

CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
CVE-2026-76884: ERF file parser crash (bsc#1275834).
CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
CVE-2026-76890: Sharkd utility crash (bsc#1275841).
CVE-2026-76891: Sharkd utility crash (bsc#1275844).
CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.6.8.html

Record: SUSE-SU-2026:4379-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Debian:14	before 4.6.9-1, plus listed versions 4.4.7-14.4.8-0exp14.4.9-14.6.0-0exp14.6.0-1 Show 11 moreShow less 4.6.0~rc1-0exp14.6.0~rc1-0exp24.6.1-14.6.1-24.6.2-14.6.2-34.6.3-14.6.4-14.6.5-14.6.6-14.6.6-2	4.6.9-1
`wireshark` SUSE:Linux Enterprise Server 16.0 From an advisory covering 28 CVEs	before 4.4.18-160000.1.1	4.4.18-160000.1.1
`wireshark` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 28 CVEs	before 4.4.18-160000.1.1	4.4.18-160000.1.1
`wireshark` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 28 CVEs	before 4.6.8-150700.21.14.1	4.6.8-150700.21.14.1
`wireshark` SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 From an advisory covering 28 CVEs	before 4.6.8-150700.21.14.1	4.6.8-150700.21.14.1
`gammu` Ubuntu:16.04:LTS	All versions, plus listed versions 1.33.0-31.36.6-11.36.7-11.36.8-11.37.0-11.37.0-1build1	None known
`gammu` Ubuntu:18.04:LTS	All versions, plus listed versions 1.38.4-11.38.5-11.39.0-1	None known
`gammu` Ubuntu:20.04:LTS	All versions, plus listed versions 1.40.0-1build21.41.0-11.41.0-1ubuntu0.1	None known
`gammu` Ubuntu:22.04:LTS	All versions, plus listed versions 1.41.0-1.11.42.0-11.42.0-31.42.0-41.42.0-5	None known
`gammu` Ubuntu:24.04:LTS	All versions, plus listed versions 1.42.0-81.42.0-8.1ubuntu11.42.0-8.1ubuntu2	None known

Show 4 moreShow less

Affected packages
Package	Affected	Fixed
`gammu` Ubuntu:26.10	All versions, plus listed versions 1.42.0-111.44.0-2	None known
`gammu` Ubuntu:26.04:LTS	All versions, plus listed versions 1.42.0-101.42.0-11	None known
`wireshark` openSUSE:Tumbleweed From an advisory covering 28 CVEs	before 4.6.8-2.1	4.6.8-2.1
`wireshark` openSUSE:Leap 16.0 From an advisory covering 28 CVEs	before 4.4.18-160000.1.1	4.4.18-160000.1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-19695 is a medium vulnerability (CVSS 4.7) in Wireshark, published August 13, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.12%, the 1st percentile. Fixed in wireshark 4.6.9-1.

References

Show 60 moreShow less