CVE-2026-76927
published 2026-08-19CVE-2026-76927: H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
PriorityP334high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.18%
7.5th percentile
H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
| wireshark_foundation | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark_foundation | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector
vendor_redhat·2026-08-19·CVSS 7.5
CVE-2026-76927 [HIGH] CWE-476 wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector
wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector
H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the H.245 protocol dissector. By crafting and sending malformed H.245 protocol data, an attacker could cause the Wireshark application to crash when a user processes this untrusted network data, leading to a denial of service.
Statement: This localized Denial of Service vulnerability is rated Moderate because it solely causes application instability, leaving the underlying system and data secure. Furthermore, the exploit cannot trigger autonomously; it strictly requires a user to actively process crafted live network traffic or open
GitLab
NULL Pointer Dereference in Wireshark
vendor_gitlab·2026-08-19·CVSS 4.7
CVE-2026-76927 [MEDIUM] CWE-476 NULL Pointer Dereference in Wireshark
NULL Pointer Dereference in Wireshark
H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected products: Wireshark
Affected versions: >=4.6.0, =4.4.0, <4.4.18 (affected)
Solution: Upgrade to version 4.6.8 or above
Credit: Aisle Research (Dmitrijs Trizna, Luigino Camastra, Ze Sheng (O2Lab & TAMU), Igor Morgenstern)
GHSA
H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
ghsa_unreviewed·2026-08-20
CVE-2026-76927 [MEDIUM] CWE-476 H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
VulDB
Wireshark up to 4.4.18/4.6.7 H.245 Protocol Dissector input validation
vuldb·2026-08-20·CVSS 4.7
CVE-2026-76927 [MEDIUM] Wireshark up to 4.4.18/4.6.7 H.245 Protocol Dissector input validation
A vulnerability was found in Wireshark up to 4.4.18/4.6.7. It has been declared as problematic. This affects an unknown function of the component H.245 Protocol Dissector. The manipulation results in improper input validation.
This vulnerability was named CVE-2026-76927. The attack may be performed from remote. There is no available exploit.
It is recommended to upgrade the affected component.
No detection rules found.
No public exploits indexed.
2026-08-19
Published