CVE-2026-19696

Out-of-bounds Write in Wireshark

6.6 MediumFix available

Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: High

Exploit likelihood

0.12%Unchanged since Aug 13, 2026

What each source reports

CVE List Score used 6.6

Out-of-bounds Write in Wireshark

Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows

Record: CVE-2026-19696
CVSS 3.1: 6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Weakness: CWE-787
Updated: 2026-11-02

EUVDEUVD-2026-57743 6.6

Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows

Record: EUVD-2026-57743
CVSS 3.1: 6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-5rr4-x8fc-q7fc 6.6

Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of...

Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows

Record: GHSA-5rr4-x8fc-q7fc
CVSS 3.1: 6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Weakness: CWE-787
Updated: 2026-11-02

NVD 6.6

Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows

Record: CVE-2026-19696
CVSS 3.1: 6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-787
Updated: 2026-11-02

OSV 6.6

Out-of-bounds Write in Wireshark

Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows

Record: CVE-2026-19696
CVSS 3.1: 6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Weakness: CWE-787
Updated: 2026-11-02

OSVDEBIAN-CVE-2026-19696 5.5

Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows

Record: DEBIAN-CVE-2026-19696
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 5 moreShow less

OSVUBUNTU-CVE-2026-19696 6.6

Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows

Record: UBUNTU-CVE-2026-19696
CVSS 3.1: 6.6 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVopenSUSE-SU-2026:11579-1 No score

libwireshark19-4.6.8-2.1 on GA media

These are all security issues fixed in the libwireshark19-4.6.8-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:11579-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:22014-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.4.18:

CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
CVE-2026-76884: ERF file parser crash (bsc#1275834).
CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
CVE-2026-76890: Sharkd utility crash (bsc#1275841).
CVE-2026-76891: Sharkd utility crash (bsc#1275844).
CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html

Record: openSUSE-SU-2026:22014-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24013-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.4.18:

CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
CVE-2026-76884: ERF file parser crash (bsc#1275834).
CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
CVE-2026-76890: Sharkd utility crash (bsc#1275841).
CVE-2026-76891: Sharkd utility crash (bsc#1275844).
CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html

Record: SUSE-SU-2026:24013-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4379-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.6.8:

CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
CVE-2026-76884: ERF file parser crash (bsc#1275834).
CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
CVE-2026-76890: Sharkd utility crash (bsc#1275841).
CVE-2026-76891: Sharkd utility crash (bsc#1275844).
CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.6.8.html

Record: SUSE-SU-2026:4379-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Debian:14	before 4.6.9-1, plus listed versions 4.4.7-14.4.8-0exp14.4.9-14.6.0-0exp14.6.0-1 Show 11 moreShow less 4.6.0~rc1-0exp14.6.0~rc1-0exp24.6.1-14.6.1-24.6.2-14.6.2-34.6.3-14.6.4-14.6.5-14.6.6-14.6.6-2	4.6.9-1
`wireshark` SUSE:Linux Enterprise Server 16.0 From an advisory covering 28 CVEs	before 4.4.18-160000.1.1	4.4.18-160000.1.1
`wireshark` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 28 CVEs	before 4.4.18-160000.1.1	4.4.18-160000.1.1
`wireshark` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 28 CVEs	before 4.6.8-150700.21.14.1	4.6.8-150700.21.14.1
`wireshark` SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 From an advisory covering 28 CVEs	before 4.6.8-150700.21.14.1	4.6.8-150700.21.14.1
`wireshark` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 9 moreShow less 1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3	None known
`wireshark` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 8 moreShow less 2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2	None known
`wireshark` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 7 moreShow less 2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2	None known
`wireshark` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2	None known
`wireshark` Ubuntu:Pro:22.04:LTS	All versions, plus listed versions 3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1	None known

Show 5 moreShow less

Affected packages
Package	Affected	Fixed
`wireshark` Ubuntu:24.04:LTS	All versions, plus listed versions 4.0.8-14.0.10-14.0.11-14.2.0-14.2.2-14.2.2-1.1build14.2.2-1.1build24.2.2-1.1build3	None known
`wireshark` Ubuntu:26.10	All versions, plus listed versions 4.6.4-14.6.6-14.6.6-24.6.6-2build1	None known
`wireshark` Ubuntu:26.04:LTS	All versions, plus listed versions 4.4.7-14.6.0-14.6.1-24.6.2-34.6.3-14.6.4-1	None known
`wireshark` openSUSE:Tumbleweed From an advisory covering 28 CVEs	before 4.6.8-2.1	4.6.8-2.1
`wireshark` openSUSE:Leap 16.0 From an advisory covering 28 CVEs	before 4.4.18-160000.1.1	4.4.18-160000.1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-19696 is a medium vulnerability (CVSS 6.6) in Wireshark, published August 13, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.12%, the 2nd percentile. Fixed in wireshark 4.6.9-1.

References

Show 60 moreShow less