CVE-2026-76919

A flaw was found in Wireshark. A remote attacker could exploit a denial of service vulnerability in the ESS protocol dissector by processing a specially crafted network packet. This could lead to the application crashing, preventing network traffic analysis. The impact is limited to the availability of the Wireshark application itself.

This Moderate impact denial of service vulnerability affects Wireshark's ESS protocol dissector. An attacker can crash the application by providing a specially crafted network packet for analysis. The impact is limited to the availability of the Wireshark application, requiring user interaction to process the malicious input.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue prior to patching, disable the ESS protocol dissector by running tshark --disable-protocol ess or unchecking ESS under Analyze > Enabled Protocols. Additionally, avoid opening packet capture files from untrusted sources and restrict live capture to trusted networks using host firewalls. On systems where packet analysis is non-essential, remove the wireshark package entirely or restrict execution permissions strictly to authorized administrators.