Read the docs
Red Hat Security Advisory

RHSA-2026:84721

wireshark security update

Released 2026-10-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 8 records

TI-2026-53718 CVE-2026-76886 · GHSA-wrhv-64xq-9g54

Heap-based Buffer Overflow in Wireshark

Priority HIGH 76

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00382 Published 2026-08-19 Partial fix · 4.6.8, 4.4.18 CWE-122
TI-2026-63612 CVE-2026-95387 · GHSA-v28h-8438-ghj5

Heap-based Buffer Overflow in Wireshark

Priority HIGH 73

SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122
TI-2026-63614 CVE-2026-95389 · GHSA-7xm4-72f8-6hpw

Heap-based Buffer Overflow in Wireshark

Priority HIGH 70

SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00337 Published 2026-09-29 Fixed in 4.6.9, 4.4.19 CWE-122
TI-2026-53745 CVE-2026-76928 · GHSA-3qqr-q2w4-r5qh

NULL Pointer Dereference in Wireshark

Priority LOW 39

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00318 Published 2026-08-19 Fixed in 4.6.8, 4.4.18 CWE-476
TI-2026-53711 CVE-2026-76879 · GHSA-wjf3-82r2-8vvm

Stack-based Buffer Overflow in Wireshark

Priority LOW 39

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00312 Published 2026-08-19 Fixed in 4.6.8, 4.4.18 CWE-121
TI-2026-53712 CVE-2026-76880 · GHSA-fh6r-4w3g-qgmx

Out-of-bounds Write in Wireshark

Priority LOW 38

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00243 Published 2026-08-19 Partial fix · 4.6.8, 4.4.18 CWE-787
TI-2026-53736 CVE-2026-76919 · GHSA-q6rp-8q4h-v3mc

Use of Uninitialized Variable in Wireshark

Priority LOW 33

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00312 Published 2026-08-19 Partial fix · 4.6.8, 4.4.18 CWE-457
TI-2026-53744 CVE-2026-76927 · GHSA-wgph-5cfp-hvhq

NULL Pointer Dereference in Wireshark

Priority LOW 32

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00184 Published 2026-08-19 Partial fix · 4.6.8, 4.4.18 CWE-476