CVE-2026-19694
published 2026-08-13CVE-2026-19694: TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service
PriorityP416medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.13%
2.3th percentile
TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | wireshark | — | — |
| wireshark | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
| wireshark_foundation | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
wireshark: Heap-based Buffer Overflow in Wireshark
vendor_redhat·2026-08-13·CVSS 4.7
CVE-2026-19694 [MEDIUM] CWE-122 wireshark: Heap-based Buffer Overflow in Wireshark
wireshark: Heap-based Buffer Overflow in Wireshark
TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service
A flaw was found in the TTX Logger file parser in Wireshark. This issue occurs when malformed packets are decoded from a packet capture file, causing a heap-based buffer overflow, resulting in a denial of service.
Statement: This issue will cause a crash in Wireshark, with no evidence of arbitrary code execution. This vulnerability can only be exploited when a malformed packet capture file is processed. Due to these reasons, this flaw has been rated with a moderate severity.
Mitigation: To mitigate this vulnerability, do not open untrusted capture files.
Package: wireshark (Red Hat Enterprise Linux 10) - Not affected
Package: wireshark (Red Hat Enterprise Linux 6
GitLab
Heap-based Buffer Overflow in Wireshark
vendor_gitlab·2026-08-13·CVSS 4.7
CVE-2026-19694 [MEDIUM] CWE-122 Heap-based Buffer Overflow in Wireshark
Heap-based Buffer Overflow in Wireshark
TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service
Affected products: Wireshark
Affected versions: >=4.6.0, <4.6.8 (affected)
Solution: Upgrade to version 4.6.8 or above
Credit: Claude and Ada Logics
GHSA
TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service
ghsa_unreviewed·2026-08-13
CVE-2026-19694 [MEDIUM] CWE-122 TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service
TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-19694 wireshark: Heap-based Buffer Overflow in Wireshark [fedora-all]
bugzilla·2026-08-14·CVSS 4.7
CVE-2026-19694 [MEDIUM] CVE-2026-19694 wireshark: Heap-based Buffer Overflow in Wireshark [fedora-all]
CVE-2026-19694 wireshark: Heap-based Buffer Overflow in Wireshark [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service
Bugzilla
CVE-2026-19694 wireshark: Heap-based Buffer Overflow in Wireshark
bugzilla·2026-08-13·CVSS 4.7
CVE-2026-19694 [MEDIUM] CVE-2026-19694 wireshark: Heap-based Buffer Overflow in Wireshark
CVE-2026-19694 wireshark: Heap-based Buffer Overflow in Wireshark
TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service
2026-08-13
Published