CVE-2026-76922
wireshark: Wireshark: Denial of Service via Bluetooth BR/EDR FHS protocol dissector crash
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 20, 2026
Updated · September 11, 2026
Description
A flaw was found in Wireshark. A local attacker could exploit a crash in the Bluetooth BR/EDR FHS protocol dissector, requiring user interaction. This vulnerability could lead to a denial of service, making the application unavailable to users.
Statement
This Moderate impact flaw in Wireshark is due to a Bluetooth BR/EDR FHS protocol dissector crash. Exploitation requires user interaction, as an attacker must convince a local user to open a specially crafted capture file, leading to a denial of service for the application.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, users should avoid opening untrusted or suspicious capture files with Wireshark. If Wireshark is not essential for system operation, consider removing the package to eliminate the attack surface. Removing Wireshark may also remove other desktop environment packages if they depend on it, potentially impacting graphical functionality.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-617 · Reachable Assertion