CVE-2026-19695
Received Received - Intake

Gammu DCT3 Trace File Parser Denial of Service

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: GitLab Inc.

Description
Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-19695
EUVD
EUVD-2026-57744

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
wireshark wireshark From 4.6.0 (inc) to 4.6.7 (inc)
wireshark wireshark 4.6.8

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-19695 is an unbounded stack buffer overflow in Wireshark's Gammu DCT3 trace file parser. It occurs when processing GSM Um frames from XML attributes. The parser's write cursor advances without bounds, writing attacker-controlled data past a 23-byte stack array. This leads to crashes like stack smashing or SIGABRT/SIGSEGV.

Detection Guidance

To detect this vulnerability, check if your Wireshark version is between 4.6.0 and 4.6.7. Run 'wireshark -v' or 'tshark -v' to verify the installed version. If the version is within this range, the system is potentially vulnerable.

Impact Analysis

This vulnerability could allow an attacker to crash Wireshark, tshark, editcap, or capinfos by tricking a user into opening a maliciously crafted file. While no known exploits exist, it may lead to denial of service or potential code execution in rare cases.

Mitigation Strategies

Upgrade Wireshark to version 4.6.8 or later immediately. This can be done via your package manager (e.g., 'sudo apt upgrade wireshark' on Debian/Ubuntu) or by downloading the latest version from the official Wireshark website.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19695. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart