CVE Database›Document archive›CVE-2026-76922

CVE-2026-76922

wireshark: Wireshark: Denial of Service via Bluetooth BR/EDR FHS protocol dissector crash

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 20, 2026

Updated · September 11, 2026

Description

A flaw was found in Wireshark. A local attacker could exploit a crash in the Bluetooth BR/EDR FHS protocol dissector, requiring user interaction. This vulnerability could lead to a denial of service, making the application unavailable to users.

Statement

This Moderate impact flaw in Wireshark is due to a Bluetooth BR/EDR FHS protocol dissector crash. Exploitation requires user interaction, as an attacker must convince a local user to open a specially crafted capture file, leading to a denial of service for the application.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, users should avoid opening untrusted or suspicious capture files with Wireshark. If Wireshark is not essential for system operation, consider removing the package to eliminate the attack surface. Removing Wireshark may also remove other desktop environment packages if they depend on it, potentially impacting graphical functionality.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-617 · Reachable Assertion