CVE-2026-76880

Analyzed Analyzed - Analysis Complete

RRC Protocol Dissector DoS in Wireshark

Publication date: 2026-08-19

Last updated on: 2026-09-01

Assigner: GitLab Inc.

Description

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-09-01

Generated

2026-09-09

AI Q&A

2026-08-20

EPSS Evaluated

2026-09-07

NVD

CVE-2026-76880

EUVD

EUVD-2026-63176

Affected Vendors & Products

Vendor	Product	Version / Range
wireshark	wireshark	From 4.6.0 (inc) to 4.6.8 (exc)
wireshark	wireshark	From 4.4.0 (inc) to 4.4.18 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a denial of service issue in the RRC protocol dissector affecting versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18. It allows an attacker to crash the dissector, causing a service disruption.

Detection Guidance

This vulnerability is related to a crash in the RRC protocol dissector, which could be exploited to cause a denial of service. Detection may involve monitoring network traffic for malformed RRC protocol packets or crashes in network analysis tools like Wireshark. Check for crashes in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 when processing RRC protocol traffic.

Impact Analysis

The vulnerability can lead to a denial of service, meaning systems using the affected versions may become unresponsive or crash, disrupting normal operations and availability.

Compliance Impact

This vulnerability causes a denial of service via a crash in the RRC protocol dissector, which could disrupt network services. Such disruptions may impact compliance with standards requiring availability, such as GDPR (data processing integrity) or HIPAA (system availability for protected health information). However, specific compliance impacts depend on system configuration and use case.

Mitigation Strategies

Update the affected software to versions outside the vulnerable range (4.6.0 to 4.6.7 and 4.4.0 to 4.4.18). If using Wireshark or similar tools with RRC protocol dissectors, apply patches or updates immediately to prevent denial of service.

Hi! I’m here to help you understand CVE-2026-76880. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70