CVE-2026-19694
Received Received - Intake

TTX Logger Parser Crash Causes Denial of Service

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: GitLab Inc.

Description
TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-19694
EUVD
EUVD-2026-57745

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
wireshark wireshark From 4.6.0 (inc) to 4.6.7 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-19694 is a heap-buffer-overflow vulnerability in Wireshark's TTX Logger file parser affecting versions 4.6.0 to 4.6.7. It occurs when processing malformed packet capture files, causing the application to crash due to a denial of service. The issue stems from insufficient validation of buffer sizes during file parsing, leading to out-of-bounds memory writes.

Detection Guidance

This vulnerability is triggered by opening a malformed .ttl file in Wireshark versions 4.6.0 to 4.6.7. Detection involves checking for crashes when processing such files or monitoring for heap-buffer-overflow errors in logs. No specific commands are provided in the resources, but users should ensure they are running patched versions of Wireshark.

Impact Analysis

This vulnerability can cause Wireshark to crash when opening a specially crafted file, resulting in denial of service. An attacker could exploit it by tricking a user into opening a malicious .ttl file, potentially leading to memory corruption or remote code execution in severe cases.

Mitigation Strategies

Upgrade Wireshark to version 4.6.8 or later immediately to address the vulnerability. Avoid opening untrusted .ttl files until the update is applied. The vulnerability can be exploited by opening a specially crafted file, so caution with file sources is critical.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19694. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart