CVE-2026-76927

A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the H.245 protocol dissector. By crafting and sending malformed H.245 protocol data, an attacker could cause the Wireshark application to crash when a user processes this untrusted network data, leading to a denial of service.

This localized Denial of Service vulnerability is rated Moderate because it solely causes application instability, leaving the underlying system and data secure. Furthermore, the exploit cannot trigger autonomously; it strictly requires a user to actively process crafted live network traffic or open a malicious capture file.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, disable the H.245 protocol dissector by running tshark --disable-protocol h245 or unchecking H.245 under Analyze > Enabled Protocols. Additionally, avoid opening packet capture files from untrusted sources and restrict live capture to trusted networks using host firewalls. On systems where packet analysis is non-essential, remove the wireshark package entirely or restrict execution permissions strictly to authorized administrators.