CVE-2026-76882
published 2026-08-19CVE-2026-76882: Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
PriorityP418medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.14%
2.9th percentile
Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
| wireshark_foundation | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark_foundation | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Wireshark up to 4.4.17/4.6.7 Bluetooth Attribute Protocol Dissector denial of service
vuldb·2026-08-20·CVSS 4.7
CVE-2026-76882 [MEDIUM] Wireshark up to 4.4.17/4.6.7 Bluetooth Attribute Protocol Dissector denial of service
A vulnerability classified as problematic was found in Wireshark up to 4.4.17/4.6.7. This affects an unknown part of the component Bluetooth Attribute Protocol Dissector. The manipulation results in denial of service.
This vulnerability is reported as CVE-2026-76882. The attack requires a local approach. No exploit exists.
Upgrading the affected component is advised.
GHSA
Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
ghsa_unreviewed·2026-08-20
CVE-2026-76882 [MEDIUM] CWE-125 Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Red Hat
wireshark: Wireshark: Denial of Service via Bluetooth Attribute Protocol dissector out-of-bounds read
vendor_redhat·2026-08-19·CVSS 4.7
CVE-2026-76882 [MEDIUM] CWE-125 wireshark: Wireshark: Denial of Service via Bluetooth Attribute Protocol dissector out-of-bounds read
wireshark: Wireshark: Denial of Service via Bluetooth Attribute Protocol dissector out-of-bounds read
Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
A flaw was found in Wireshark. The Bluetooth Attribute Protocol dissector contains an out-of-bounds read vulnerability. A remote attacker could exploit this by crafting a malicious Bluetooth packet, leading to a crash of the Wireshark application. This crash results in a denial of service (DoS), preventing the user from analyzing network traffic.
Statement: A flaw was found in the Bluetooth Attribute Protocol dissector in Wireshark versions 4.4.0 through 4.4.17 and 4.6.0 through 4.6.7. Red Hat Enterprise Linux 6, 7, 8, and 9 ship Wireshark versions prior to the affected range and
GitLab
Out-of-bounds Read in Wireshark
vendor_gitlab·2026-08-19·CVSS 4.7
CVE-2026-76882 [MEDIUM] CWE-125 Out-of-bounds Read in Wireshark
Out-of-bounds Read in Wireshark
Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected products: Wireshark
Affected versions: >=4.6.0, =4.4.0, <4.4.18 (affected)
Solution: Upgrade to version 4.6.8 or above
Credit: Yazan Balawneh - CyStack Security Team
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-76882 wireshark: Wireshark: Denial of Service via Bluetooth Attribute Protocol dissector out-of-bounds read [fedora-all]
bugzilla·2026-08-21·CVSS 4.7
CVE-2026-76882 [MEDIUM] CVE-2026-76882 wireshark: Wireshark: Denial of Service via Bluetooth Attribute Protocol dissector out-of-bounds read [fedora-all]
CVE-2026-76882 wireshark: Wireshark: Denial of Service via Bluetooth Attribute Protocol dissector out-of-bounds read [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Discussion:
Fixed in the current version of wireshark. Closing.
Bugzilla
CVE-2026-76882 wireshark: Wireshark: Denial of Service via Bluetooth Attribute Protocol dissector out-of-bounds read
bugzilla·2026-08-19·CVSS 4.7
CVE-2026-76882 [MEDIUM] CVE-2026-76882 wireshark: Wireshark: Denial of Service via Bluetooth Attribute Protocol dissector out-of-bounds read
CVE-2026-76882 wireshark: Wireshark: Denial of Service via Bluetooth Attribute Protocol dissector out-of-bounds read
Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
2026-08-19
Published