CVE-2026-76922

Analyzed Analyzed - Analysis Complete

Bluetooth BR/EDR FHS Protocol Dissector DoS in Wireshark

Publication date: 2026-08-19

Last updated on: 2026-08-31

Assigner: GitLab Inc.

Description

Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-31

Generated

2026-09-09

AI Q&A

2026-08-20

EPSS Evaluated

2026-09-07

NVD

CVE-2026-76922

EUVD

EUVD-2026-63157

Affected Vendors & Products

Vendor	Product	Version / Range
wireshark	wireshark	From 4.6.0 (inc) to 4.6.8 (exc)
wireshark	wireshark	From 4.4.0 (inc) to 4.4.18 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability is a Bluetooth BR/EDR FHS protocol dissector crash affecting Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18. It allows a denial of service attack by causing the application to crash when processing certain Bluetooth FHS packets.

Detection Guidance

This vulnerability affects Bluetooth BR/EDR FHS protocol dissectors in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18. To detect it, check your Wireshark version with 'wireshark --version'. If using a vulnerable version, update immediately.

Impact Analysis

If exploited, this vulnerability could cause Wireshark to crash, disrupting network analysis and monitoring activities. It may lead to temporary loss of functionality for users relying on Wireshark for Bluetooth traffic analysis.

Compliance Impact

This vulnerability causes a denial of service via a Bluetooth BR/EDR FHS protocol dissector crash. It does not directly impact data confidentiality or integrity but may disrupt system availability, which could affect compliance with standards requiring continuous service availability such as HIPAA for healthcare systems.

Mitigation Strategies

Update Wireshark to the latest non-vulnerable version. If updating is not possible, disable Bluetooth protocol dissection in Wireshark or avoid processing Bluetooth traffic until patched.

Hi! I’m here to help you understand CVE-2026-76922. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70