CVE-2026-76888

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-76888
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-76888.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-76888
Downstream
Related
Published
2026-08-19T22:35:34.923Z
Modified
2026-08-30T03:47:36.498515830Z
Severity
  • 3.1 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVSS Calculator
Summary
Heap-based Buffer Overflow in Wireshark
Details

RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/76xxx/CVE-2026-76888.json",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "4.6.0"
                },
                {
                    "fixed": "4.6.8"
                },
                {
                    "introduced": "4.4.0"
                },
                {
                    "fixed": "4.4.18"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-122"
    ],
    "cna_assigner": "GitLab"
}
References

Affected packages

Git / github.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://github.com/wireshark/wireshark
Events
Introduced
009a163470b581c7d3ee66d89c819cef1f9e50fe
Fixed
b6c99a3f2a1aecf7926e7e64a94488b2bd071571
Introduced
cdfb6721e77c19d43f4787f66e9d5f2525281a22
Fixed
e677bf052328efc1ed897a547fa161836a0e4ff7
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "4.4.0"
        },
        {
            "fixed": "4.4.18"
        },
        {
            "introduced": "4.6.0"
        },
        {
            "fixed": "4.6.8"
        }
    ]
}

Affected versions

v4.*
v4.4.0
v4.4.1
v4.4.10
v4.4.10rc0
v4.4.11
v4.4.11rc0
v4.4.12
v4.4.12rc0
v4.4.13
v4.4.13rc0
v4.4.14
v4.4.14rc0
v4.4.15
v4.4.15rc0
v4.4.16
v4.4.16rc0
v4.4.17
v4.4.17rc0
v4.4.18rc0
v4.4.1rc0
v4.4.2
v4.4.2rc0
v4.4.3
v4.4.3rc0
v4.4.4
v4.4.4rc0
v4.4.5
v4.4.5rc0
v4.4.6
v4.4.6rc0
v4.4.7
v4.4.7rc0
v4.4.8
v4.4.8rc0
v4.4.9
v4.4.9rc0
v4.6.0
v4.6.1
v4.6.16
v4.6.1rc0
v4.6.2
v4.6.2rc0
v4.6.3
v4.6.3rc0
v4.6.4
v4.6.4rc0
v4.6.5
v4.6.5rc0
v4.6.6
v4.6.6rc0
v4.6.7
v4.6.7rc0
v4.6.8rc0
wireshark-4.*
wireshark-4.4.0
wireshark-4.4.1
wireshark-4.4.2
wireshark-4.4.3
wireshark-4.4.4
wireshark-4.4.5
wireshark-4.4.6
wireshark-4.4.7
wireshark-4.4.8
wireshark-4.4.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-76888.json"

Git / gitlab.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://gitlab.com/wireshark/wireshark
Events
Introduced
009a163470b581c7d3ee66d89c819cef1f9e50fe
Fixed
b6c99a3f2a1aecf7926e7e64a94488b2bd071571
Introduced
cdfb6721e77c19d43f4787f66e9d5f2525281a22
Fixed
e677bf052328efc1ed897a547fa161836a0e4ff7
Database specific
Show details 
{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.4.0"
        },
        {
            "fixed": "4.4.18"
        },
        {
            "introduced": "4.6.0"
        },
        {
            "fixed": "4.6.8"
        }
    ]
}

Affected versions

v4.*
v4.4.0
v4.4.1
v4.4.10
v4.4.10rc0
v4.4.11
v4.4.11rc0
v4.4.12
v4.4.12rc0
v4.4.13
v4.4.13rc0
v4.4.14
v4.4.14rc0
v4.4.15
v4.4.15rc0
v4.4.16
v4.4.16rc0
v4.4.17
v4.4.17rc0
v4.4.18rc0
v4.4.1rc0
v4.4.2
v4.4.2rc0
v4.4.3
v4.4.3rc0
v4.4.4
v4.4.4rc0
v4.4.5
v4.4.5rc0
v4.4.6
v4.4.6rc0
v4.4.7
v4.4.7rc0
v4.4.8
v4.4.8rc0
v4.4.9
v4.4.9rc0
v4.6.0
v4.6.1
v4.6.1rc0
v4.6.2
v4.6.2rc0
v4.6.3
v4.6.3rc0
v4.6.4
v4.6.4rc0
v4.6.5
v4.6.5rc0
v4.6.6
v4.6.6rc0
v4.6.7
v4.6.7rc0
v4.6.8rc0
wireshark-4.*
wireshark-4.4.0
wireshark-4.4.1
wireshark-4.4.2
wireshark-4.4.3
wireshark-4.4.4
wireshark-4.4.5
wireshark-4.4.6
wireshark-4.4.7
wireshark-4.4.8
wireshark-4.4.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-76888.json"