CVE-2026-76885
published 2026-08-19CVE-2026-76885: Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
PriorityP426medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
0.21%
11.3th percentile
Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
| wireshark_foundation | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark_foundation | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat3.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
ghsa_unreviewed·2026-08-20
CVE-2026-76885 [LOW] CWE-126 Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
VulDB
Wireshark up to 4.4.17/4.6.7 K12xx denial of service
vuldb·2026-08-20·CVSS 3.1
CVE-2026-76885 [LOW] Wireshark up to 4.4.17/4.6.7 K12xx denial of service
A vulnerability was found in Wireshark up to 4.4.17/4.6.7 and classified as problematic. This vulnerability affects unknown code of the component K12xx. Such manipulation leads to denial of service.
This vulnerability is uniquely identified as CVE-2026-76885. The attack can be launched remotely. No exploit exists.
It is suggested to upgrade the affected component.
GitLab
Buffer Over-read in Wireshark
vendor_gitlab·2026-08-19·CVSS 3.1
CVE-2026-76885 [LOW] CWE-126 Buffer Over-read in Wireshark
Buffer Over-read in Wireshark
Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected products: Wireshark
Affected versions: >=4.6.0, =4.4.0, <4.4.18 (affected)
Solution: Upgrade to version 4.6.8 or above
Credit: Jaime Cavero
Red Hat
wireshark: Wireshark: Denial of Service via Tektronix K12xx file parsing
vendor_redhat·2026-08-19·CVSS 3.1
CVE-2026-76885 [LOW] CWE-125 wireshark: Wireshark: Denial of Service via Tektronix K12xx file parsing
wireshark: Wireshark: Denial of Service via Tektronix K12xx file parsing
A flaw was found in Wireshark. This vulnerability, a buffer over-read, occurs when the Tektronix K12xx file parser processes a specially crafted file. A remote attacker could exploit this by convincing a user to open a malicious Tektronix K12xx file, leading to a crash of the Wireshark application and resulting in a denial of service.
Statement: A buffer over-read was found in the Tektronix K12xx file parser in Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.7. Red Hat Enterprise Linux 6, 7, 8, and 9 ship Wireshark versions prior to the affected range and are not vulnerable. Red Hat Enterprise Linux 10 and Red Hat In-Vehicle OS ship an affected version of Wireshark.
Mitigation: Do not open untrusted p
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-76885 wireshark: Wireshark: Denial of Service via Tektronix K12xx file parsing [fedora-all]
bugzilla·2026-08-20·CVSS 3.1
CVE-2026-76885 [LOW] CVE-2026-76885 wireshark: Wireshark: Denial of Service via Tektronix K12xx file parsing [fedora-all]
CVE-2026-76885 wireshark: Wireshark: Denial of Service via Tektronix K12xx file parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Bugzilla
CVE-2026-76885 wireshark: Wireshark: Denial of Service via Tektronix K12xx file parsing
bugzilla·2026-08-19·CVSS 3.1
CVE-2026-76885 [LOW] CVE-2026-76885 wireshark: Wireshark: Denial of Service via Tektronix K12xx file parsing
CVE-2026-76885 wireshark: Wireshark: Denial of Service via Tektronix K12xx file parsing
Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
2026-08-19
Published