CVE-2026-76884: Buffer Over-read in Wireshark
Published Aug 19, 2026
·Updated
ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected Software
1 affected component
Wireshark Wireshark>=4.6.0<=4.6.7, >=4.4.0<=4.4.18
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wiresharkto a version that resolves this vulnerability.Fixed in 4.6.8
Event History
Aug 19, 2026
CVE Published
via MITRE·10:35 PM
Data Sourced
via MITRE·10:35 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attack can be delivered over the network without privileges, but exploitation has high complexity and requires user interaction.
2
Which deployments are affected?
Wireshark versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18 are affected when processing ERF files.
3
What is the practical impact of successful exploitation?
Successful exploitation can crash the ERF file parser, resulting in denial of service. The provided severity data indicates no confidentiality or integrity impact.