Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-08-19T22:44:05 wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CWE-787

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

A flaw was found in Wireshark. This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted Universal Mobile Telecommunications System (UMTS) RRC protocol packet. The flaw resides in the UMTS RRC protocol dissector, which can lead to a crash of the Wireshark application. This can disrupt network analysis operations.

This Moderate impact denial of service flaw in Wireshark's UMTS RRC protocol dissector can be triggered by processing a specially crafted packet. While exploitable by a remote attacker, successful exploitation requires a user to either open a malicious capture file or actively capture network traffic containing the crafted packet. This limits the attack surface to scenarios where Wireshark is actively used for network analysis. To mitigate this issue, avoid opening untrusted capture files or analyzing untrusted live network traffic with Wireshark. Users should only process network data from trusted sources to prevent potential denial of service attacks. Red Hat Enterprise Linux 10 Affected wireshark Red Hat Enterprise Linux 6 Not affected wireshark Red Hat Enterprise Linux 7 Affected wireshark Red Hat Enterprise Linux 8 Affected wireshark Red Hat Enterprise Linux 9 Affected wireshark https://www.cve.org/CVERecord?id=CVE-2026-76880 https://nvd.nist.gov/vuln/detail/CVE-2026-76880 https://gitlab.com/wireshark/wireshark/-/work_items/21478 https://www.wireshark.org/security/wnpa-sec-2026-88.html