CVE-2026-76880
published 2026-08-19CVE-2026-76880: RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
PriorityP334high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.24%
14.7th percentile
RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
| wireshark_foundation | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark_foundation | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
ghsa_unreviewed·2026-08-20
CVE-2026-76880 [HIGH] CWE-787 RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
VulDB
Wireshark up to 4.4.17/4.6.7 RRC protocol dissector denial of service
vuldb·2026-08-20·CVSS 7.5
CVE-2026-76880 [HIGH] Wireshark up to 4.4.17/4.6.7 RRC protocol dissector denial of service
A vulnerability has been found in Wireshark up to 4.4.17/4.6.7 and classified as problematic. This affects an unknown part of the component RRC protocol dissector. This manipulation causes denial of service.
This vulnerability is handled as CVE-2026-76880. The attack can be initiated remotely. There is not any exploit available.
The affected component should be upgraded.
Red Hat
wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write
vendor_redhat·2026-08-19·CVSS 7.5
CVE-2026-76880 [HIGH] CWE-787 wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write
wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write
A flaw was found in Wireshark. This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted Universal Mobile Telecommunications System (UMTS) RRC protocol packet. The flaw resides in the UMTS RRC protocol dissector, which can lead to a crash of the Wireshark application. This can disrupt network analysis operations.
Statement: This Moderate impact denial of service flaw in Wireshark's UMTS RRC protocol dissector can be triggered by processing a specially crafted packet. While exploitable by a remote attacker, successful exploitation requires a user to either open a malicious capture file or actively capture network traffic containing the crafted packet.
GitLab
Out-of-bounds Write in Wireshark
vendor_gitlab·2026-08-19·CVSS 7.5
CVE-2026-76880 [HIGH] CWE-787 Out-of-bounds Write in Wireshark
Out-of-bounds Write in Wireshark
RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected products: Wireshark
Affected versions: >=4.6.0, =4.4.0, <4.4.18 (affected)
Solution: Upgrade to version 4.6.8 or above
Credit: Aisle Research (Dmitrijs Trizna, Luigino Camastra, Ze Sheng (O2Lab & TAMU), Igor Morgenstern)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-76880 wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write [fedora-all]
bugzilla·2026-08-20·CVSS 7.5
CVE-2026-76880 [HIGH] CVE-2026-76880 wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write [fedora-all]
CVE-2026-76880 wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Bugzilla
CVE-2026-76880 wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write
bugzilla·2026-08-19·CVSS 7.5
CVE-2026-76880 [HIGH] CVE-2026-76880 wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write
CVE-2026-76880 wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write
RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
2026-08-19
Published