CVE-2026-76880
Received Received - Intake

RRC Protocol Dissector DoS in Wireshark

Vulnerability report for CVE-2026-76880, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: GitLab Inc.

Description

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a denial of service issue in the RRC protocol dissector affecting versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18. It allows an attacker to crash the dissector, causing a service disruption.

Impact Analysis

The vulnerability can lead to a denial of service, meaning systems using the affected versions may become unresponsive or crash, disrupting normal operations and availability.

Mitigation Strategies

Update the affected software to versions outside the vulnerable range (4.6.0 to 4.6.7 and 4.4.0 to 4.4.18). If using Wireshark or similar tools with RRC protocol dissectors, apply patches or updates immediately to prevent denial of service.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76880. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart