Read the docs
TI-2026-53745 Aliases CVE-2026-76928GHSA-3qqr-q2w4-r5qh

NULL Pointer Dereference in Wireshark

Priority LOW 39CWE-476Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-476.

Summary

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00318 24th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Wireshark (Wireshark Foundation): 4.6.8, 4.4.18Red Hat: 1 advisory

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Wireshark FoundationWireshark4.6.0 to before 4.6.8; 4.4.0 to before 4.4.184.6.8, 4.4.18Patch availableCNA
  • Wireshark VendorWireshark Foundation Affected 4.6.0 to before 4.6.8; 4.4.0 to before 4.4.18 Fixed in 4.6.8, 4.4.18 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*4.4.0 to before 4.4.18; 4.6.0 to before 4.6.8VulnerableWireshark Foundation
  • cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:* Versions 4.4.0 to before 4.4.18; 4.6.0 to before 4.6.8 Vulnerable ·Wireshark Foundation

Remediation

  • Fix · CNA Wireshark (Wireshark Foundation) Fixed in 4.6.8, 4.4.18

Red Hat 1 advisory

  • RHSA-2026:84721 Released 2026-10-19 · Red Hat rating Important
    wireshark security update
    • Red Hat Enterprise Linux AppStream (v. 10) wireshark-1:4.4.2-10.el10_2.8, wireshark-cli-1:4.4.2-10.el10_2.8
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) wireshark-devel-1:4.4.2-10.el10_2.8

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Wireshark 4.4.18, 4.6.8

    25 records Highest priority Priority HIGH 2 HIGH, 4 MEDIUM, 19 LOW

    Other records, highest priority first

    • TI-2026-53718 Heap-based Buffer Overflow in WiresharkPriority HIGH 76
    • TI-2026-53720 Heap-based Buffer Overflow in WiresharkPriority HIGH 66
    • TI-2026-53716 Buffer Over-read in WiresharkPriority MEDIUM 62
    Show all 25 records →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:84721
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:84721
Not affected: 4 products
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-76928
  2. 2026-10-03 Alias added: GHSA-3qqr-q2w4-r5qh
  3. 2026-10-19 Fix available: RHSA-2026:84721 · Red Hat
  4. 2026-10-20 Fix available: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · Red Hat

References

Exploit 1

Advisory 1

  • TI-2026-53718 Heap-based Buffer Overflow in Wireshark CVSS 3.1CRITICAL 9.8
  • TI-2026-63612 Heap-based Buffer Overflow in Wireshark CVSS 3.1HIGH 8.8
  • TI-2024-16149 A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of… CVSS 3.1HIGH 7.5
  • TI-2010-00291 Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and… CVSS 2.0HIGH 7.5
  • TI-2026-63614 Heap-based Buffer Overflow in Wireshark CVSS 3.1HIGH 8.1
  • TI-2014-01823 Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in… CVSS 2.0HIGH 9.3
See all 794 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences