Every CVE Search/ Get API key

CVE-2026-76889

Heap-based Buffer Overflow in Wireshark

4.7 MediumFix available

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.13%Unchanged since Aug 20, 2026
90%50%10%1%

What each source reports

CVE List Score used 4.7

Heap-based Buffer Overflow in Wireshark

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
CVE-2026-76889
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-122
Updated
2026-11-02
EUVDEUVD-2026-63145 4.7

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
EUVD-2026-63145
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-gjp8-9g86-732v 4.7

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
GHSA-gjp8-9g86-732v
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-122
Updated
2026-11-02
NVD 4.7

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
CVE-2026-76889
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-122
Updated
2026-11-02
OSV 4.7

Heap-based Buffer Overflow in Wireshark

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
CVE-2026-76889
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-122
Updated
2026-11-02
OSVDEBIAN-CVE-2026-76889 5.5

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
DEBIAN-CVE-2026-76889
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVOESA-2026-3584 8.1

wireshark security update

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols.

Security Fix(es):

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76879)

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76880)

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76881)

Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76882)

Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76883)

ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76884)

Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76885)

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76886)

Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76887)

RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76888)

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76889)

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76890)

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76891)

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76917)

SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76918)

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76919)

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76920)

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76921)

Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76922)

Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76923)

Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76924)

BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76926)

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76927)

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76928)

Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76929)

Record
OESA-2026-3584
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-76889 4.7

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
UBUNTU-CVE-2026-76889
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-96830 No score

CVE-2026-76889 affecting package wireshark 4.4.7-2

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
AZL-96830
Updated
2026-11-05
OSVopenSUSE-SU-2026:11579-1 No score

libwireshark19-4.6.8-2.1 on GA media

These are all security issues fixed in the libwireshark19-4.6.8-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11579-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:22014-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.4.18:

  • CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
  • CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
  • CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
  • CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
  • CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
  • CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
  • CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
  • CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
  • CVE-2026-76884: ERF file parser crash (bsc#1275834).
  • CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
  • CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
  • CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
  • CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
  • CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
  • CVE-2026-76890: Sharkd utility crash (bsc#1275841).
  • CVE-2026-76891: Sharkd utility crash (bsc#1275844).
  • CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
  • CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
  • CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
  • CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
  • CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
  • CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
  • CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
  • CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
  • CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
  • CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
  • CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
  • CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html

Record
openSUSE-SU-2026:22014-1
Updated
2026-11-02
OSVSUSE-SU-2026:24013-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.4.18:

  • CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
  • CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
  • CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
  • CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
  • CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
  • CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
  • CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
  • CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
  • CVE-2026-76884: ERF file parser crash (bsc#1275834).
  • CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
  • CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
  • CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
  • CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
  • CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
  • CVE-2026-76890: Sharkd utility crash (bsc#1275841).
  • CVE-2026-76891: Sharkd utility crash (bsc#1275844).
  • CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
  • CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
  • CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
  • CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
  • CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
  • CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
  • CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
  • CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
  • CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
  • CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
  • CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
  • CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html

Record
SUSE-SU-2026:24013-1
Updated
2026-11-02
OSVSUSE-SU-2026:4379-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.6.8:

  • CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
  • CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
  • CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
  • CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
  • CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
  • CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
  • CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
  • CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
  • CVE-2026-76884: ERF file parser crash (bsc#1275834).
  • CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
  • CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
  • CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
  • CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
  • CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
  • CVE-2026-76890: Sharkd utility crash (bsc#1275841).
  • CVE-2026-76891: Sharkd utility crash (bsc#1275844).
  • CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
  • CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
  • CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
  • CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
  • CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
  • CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
  • CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
  • CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
  • CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
  • CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
  • CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
  • CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.6.8.html

Record
SUSE-SU-2026:4379-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
wireshark
Azure Linux:3
 through 4.4.7-2 None known
wireshark
Debian:12
 All versions, plus listed versions
4.0.10-14.0.11-14.0.11-1~deb12u14.0.17-0+deb12u14.0.17-0+deb12u2
Show 45 moreShow less
4.0.17-0+deb12u34.0.3-14.0.5-1~exp14.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-14.2.0-14.2.0-1~exp04.2.0~rc3-1~exp14.2.2-14.2.2-1.14.2.2-1.1~exp14.2.4-14.2.5-14.2.5-24.2.6-14.4.0-0exp14.4.0-0exp24.4.0-14.4.1-14.4.2-14.4.3-14.4.4-14.4.5-14.4.6-14.4.6-24.4.7-0exp14.4.7-14.4.8-0exp14.4.9-14.6.0-0exp14.6.0-14.6.0~rc1-0exp14.6.0~rc1-0exp24.6.1-14.6.1-24.6.2-14.6.2-34.6.3-14.6.4-14.6.5-14.6.6-14.6.6-2
 None known
wireshark
Debian:13
 before 4.4.18-0+deb13u1, plus listed versions
4.4.13-0+deb13u14.4.14-0+deb13u14.4.15-0+deb13u14.4.16-0+deb13u14.4.7-14.4.8-0exp14.4.9-1
4.4.18-0+deb13u1
wireshark
Debian:14
 before 4.6.9-1, plus listed versions
4.4.7-14.4.8-0exp14.4.9-14.6.0-0exp14.6.0-1
Show 11 moreShow less
4.6.0~rc1-0exp14.6.0~rc1-0exp24.6.1-14.6.1-24.6.2-14.6.2-34.6.3-14.6.4-14.6.5-14.6.6-14.6.6-2
4.6.9-1
wireshark
openEuler:24.03-LTS-SP1
From an advisory covering 25 CVEs
 before 4.4.18-1.oe2403sp1
4.4.18-1.oe2403sp1
wireshark
SUSE:Linux Enterprise Server 16.0
From an advisory covering 28 CVEs
 before 4.4.18-160000.1.1
4.4.18-160000.1.1
wireshark
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 28 CVEs
 before 4.4.18-160000.1.1
4.4.18-160000.1.1
wireshark
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 28 CVEs
 before 4.6.8-150700.21.14.1
4.6.8-150700.21.14.1
wireshark
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 28 CVEs
 before 4.6.8-150700.21.14.1
4.6.8-150700.21.14.1
wireshark
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1
Show 9 moreShow less
1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3
 None known
Show 9 moreShow less
Affected packages
PackageAffectedFixed
wireshark
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04
Show 8 moreShow less
2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2
 None known
wireshark
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1
Show 7 moreShow less
2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2
 None known
wireshark
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2
 None known
wireshark
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1
 None known
wireshark
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.0.8-14.0.10-14.0.11-14.2.0-14.2.2-14.2.2-1.1build14.2.2-1.1build24.2.2-1.1build3
 None known
wireshark
Ubuntu:26.10
 All versions, plus listed versions
4.6.4-14.6.6-14.6.6-24.6.6-2build1
 None known
wireshark
Ubuntu:26.04:LTS
 All versions, plus listed versions
4.4.7-14.6.0-14.6.1-24.6.2-34.6.3-14.6.4-1
 None known
wireshark
openSUSE:Tumbleweed
From an advisory covering 28 CVEs
 before 4.6.8-2.1
4.6.8-2.1
wireshark
openSUSE:Leap 16.0
From an advisory covering 28 CVEs
 before 4.4.18-160000.1.1
4.4.18-160000.1.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-76889 is a medium vulnerability (CVSS 4.7) in Wireshark, published August 19, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. Fixed in wireshark 4.4.18-0+deb13u1.

References

Show 86 moreShow less
This page doesn't list everything

Left out here: 1 version. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open