CVE-2026-76928: NULL Pointer Dereference in Wireshark
Published Aug 19, 2026
·Updated
X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected Software
1 affected component
Wireshark Wireshark>=4.6.0<=4.6.7, >=4.4.0<=4.4.18
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.6.8
Event History
Aug 19, 2026
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Which Wireshark installations are affected?
Wireshark versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18 are affected. Other versions are not identified in the provided information.
2
What does an attacker need to do to trigger the issue?
The issue is remotely reachable, requires low attack complexity, and does not require authentication or user interaction. The provided information identifies the X.509IF protocol dissector as the affected component.
3
What is the practical impact?
Successful exploitation can crash Wireshark, causing a denial of service. No confidentiality or integrity impact is indicated by the supplied CVSS vector.