CVE-2026-76882

Analyzed Analyzed - Analysis Complete

Bluetooth Attribute Protocol Denial of Service in Wireshark

Publication date: 2026-08-19

Last updated on: 2026-08-31

Assigner: GitLab Inc.

Description

Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-31

Generated

2026-09-10

AI Q&A

2026-08-20

EPSS Evaluated

2026-09-09

NVD

CVE-2026-76882

EUVD

EUVD-2026-63139

Affected Vendors & Products

Vendor	Product	Version / Range
wireshark	wireshark	From 4.6.0 (inc) to 4.6.8 (exc)
wireshark	wireshark	From 4.4.0 (inc) to 4.4.18 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability involves a crash in the Bluetooth Attribute Protocol dissector affecting Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18. The crash can be triggered remotely, leading to a denial of service condition where the application becomes unresponsive.

Detection Guidance

This vulnerability is related to a Bluetooth Attribute Protocol dissector crash in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18. To detect it, check your Wireshark version using 'wireshark --version'. If you are running a vulnerable version, update to the latest patched release immediately.

Impact Analysis

The vulnerability allows an attacker to cause a denial of service by sending specially crafted Bluetooth traffic, which could crash Wireshark or the system running it. This disrupts network analysis and monitoring activities.

Compliance Impact

This vulnerability causes a denial of service via a Bluetooth Attribute Protocol dissector crash. It does not directly affect data confidentiality or integrity but may impact system availability. Compliance impact depends on system criticality and downtime tolerance under GDPR or HIPAA, which require maintaining service availability for data processing or healthcare operations.

Mitigation Strategies

Update Wireshark to versions 4.6.8 or later for the 4.6.x branch, or 4.4.19 or later for the 4.4.x branch to address the Bluetooth Attribute Protocol dissector crash vulnerability.

Hi! I’m here to help you understand CVE-2026-76882. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70