CVE-2026-19695
published 2026-08-13CVE-2026-19695: Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service
PriorityP417medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.12%
1.6th percentile
Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | wireshark | — | — |
| wireshark | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
| wireshark_foundation | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GitLab
Stack-based Buffer Overflow in Wireshark
vendor_gitlab·2026-08-13·CVSS 4.7
CVE-2026-19695 [MEDIUM] CWE-121 Stack-based Buffer Overflow in Wireshark
Stack-based Buffer Overflow in Wireshark
Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service
Affected products: Wireshark
Affected versions: >=4.6.0, <4.6.8 (affected)
Solution: Upgrade to version 4.6.8 or above
Credit: Pedro Pinho
Red Hat
wireshark: Stack-based Buffer Overflow in Wireshark
vendor_redhat·2026-08-13·CVSS 4.7
CVE-2026-19695 [MEDIUM] CWE-121 wireshark: Stack-based Buffer Overflow in Wireshark
wireshark: Stack-based Buffer Overflow in Wireshark
Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service
A flaw was found in the Gammu DCT3 trace file parser in Wireshark. This issue occurs when malformed packets are decoded from a packet capture file, causing a stack-based buffer overflow, resulting in a denial of service.
Statement: This issue will cause a crash in Wireshark, with no evidence of arbitrary code execution. This flaw can only be exploited when a malformed packet capture file is processed. Due to these reasons, this vulnerability has been rated with a moderate severity.
Mitigation: To mitigate this vulnerability, do not open untrusted capture files.
Package: wireshark (Red Hat Enterprise Linux 10) - Not affected
Package: wireshark (Red Hat Ente
GHSA
Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service
ghsa_unreviewed·2026-08-13
CVE-2026-19695 [MEDIUM] CWE-121 Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service
Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-19695 wireshark: Stack-based Buffer Overflow in Wireshark [fedora-all]
bugzilla·2026-08-14·CVSS 4.7
CVE-2026-19695 [MEDIUM] CVE-2026-19695 wireshark: Stack-based Buffer Overflow in Wireshark [fedora-all]
CVE-2026-19695 wireshark: Stack-based Buffer Overflow in Wireshark [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service
Bugzilla
CVE-2026-19695 wireshark: Stack-based Buffer Overflow in Wireshark
bugzilla·2026-08-13·CVSS 4.7
CVE-2026-19695 [MEDIUM] CVE-2026-19695 wireshark: Stack-based Buffer Overflow in Wireshark
CVE-2026-19695 wireshark: Stack-based Buffer Overflow in Wireshark
Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service
2026-08-13
Published