CVE-2026-76929

A flaw was found in Wireshark. A local attacker, by enticing a user to open a specially crafted Pcapng file, could trigger an out-of-bounds read vulnerability in the Pcapng file parser. This could lead to an application crash, resulting in a denial of service.

This is a moderate impact denial of service flaw in Wireshark. The vulnerability requires a local attacker to trick a user into opening a specially crafted Pcapng file, leading to an application crash. The need for user interaction and local access reduces the overall risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability users must strictly avoid opening Pcapng packet capture files from untrusted or unverified sources. If business operations permit, administrators can temporarily restrict the use of Wireshark on untrusted networks to prevent the accidental ingestion of malformed traffic.