CVE-2026-76923

Analyzed Analyzed - Analysis Complete

Bluetooth HFP Profile Protocol Crash in Wireshark

Publication date: 2026-08-19

Last updated on: 2026-08-31

Assigner: GitLab Inc.

Description

Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-31

Generated

2026-09-09

AI Q&A

2026-08-20

EPSS Evaluated

2026-09-07

NVD

CVE-2026-76923

EUVD

EUVD-2026-63158

Affected Vendors & Products

Vendor	Product	Version / Range
wireshark	wireshark	From 4.6.0 (inc) to 4.6.8 (exc)
wireshark	wireshark	From 4.4.0 (inc) to 4.4.18 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a Bluetooth HFP Profile protocol dissector crash affecting versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18. It allows a denial of service attack by causing the protocol dissector to crash.

Detection Guidance

This vulnerability is related to a Bluetooth HFP Profile protocol dissector crash in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18. To detect it, check your Wireshark version using 'wireshark --version'. If it falls within the affected range, update to the latest patched version immediately.

Impact Analysis

This vulnerability can impact you by causing a denial of service, which may disrupt Bluetooth functionality on affected systems. An attacker could exploit this to make Bluetooth services unavailable.

Compliance Impact

This vulnerability causes a denial of service via Bluetooth HFP Profile protocol crashes, which may disrupt system availability. Compliance impacts depend on system criticality and data processing contexts, but no direct evidence links this issue to GDPR or HIPAA violations in the provided data.

Mitigation Strategies

Update Wireshark to a version outside the affected range (4.6.0 to 4.6.7 and 4.4.0 to 4.4.18) to prevent the Bluetooth HFP Profile protocol dissector crash.

Hi! I’m here to help you understand CVE-2026-76923. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70