CVE-2026-76882

Received Received - Intake

Bluetooth Attribute Protocol Denial of Service in Wireshark

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: GitLab Inc.

Description

Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-19

Generated

2026-08-20

AI Q&A

2026-08-20

EPSS Evaluated

N/A

NVD

CVE-2026-76882

EUVD

EUVD-2026-63139

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability involves a crash in the Bluetooth Attribute Protocol dissector affecting Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18. The crash can be triggered remotely, leading to a denial of service condition where the application becomes unresponsive.

Impact Analysis

The vulnerability allows an attacker to cause a denial of service by sending specially crafted Bluetooth traffic, which could crash Wireshark or the system running it. This disrupts network analysis and monitoring activities.

Mitigation Strategies

Update Wireshark to versions 4.6.8 or later for the 4.6.x branch, or 4.4.19 or later for the 4.4.x branch to address the Bluetooth Attribute Protocol dissector crash vulnerability.

Hi! I’m here to help you understand CVE-2026-76882. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70