CVE-2026-76923

A flaw was found in Wireshark. An out-of-bounds read vulnerability exists within the Bluetooth HFP (Hands-Free Profile) protocol dissector. A remote attacker could exploit this by tricking a user into opening a specially crafted capture file. Successful exploitation leads to a crash of the Wireshark application, resulting in a denial of service.

An out-of-bounds read was found in the Bluetooth HFP protocol dissector in Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.7. Red Hat Enterprise Linux 6, 7, 8, and 9 ship Wireshark versions prior to the affected range and are not vulnerable. Red Hat Enterprise Linux 10 and Red Hat In-Vehicle OS ship an affected version of Wireshark.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Do not open untrusted packet capture files or capture traffic from untrusted networks with Wireshark.