CVE-2026-76927

Analyzed Analyzed - Analysis Complete

H.245 Protocol Dissector DoS in Wireshark

Publication date: 2026-08-19

Last updated on: 2026-08-31

Assigner: GitLab Inc.

Description

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-31

Generated

2026-09-09

AI Q&A

2026-08-20

EPSS Evaluated

2026-09-07

NVD

CVE-2026-76927

EUVD

EUVD-2026-63164

Affected Vendors & Products

Vendor	Product	Version / Range
wireshark	wireshark	From 4.6.0 (inc) to 4.6.8 (exc)
wireshark	wireshark	From 4.4.0 (inc) to 4.4.18 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability involves a crash in the H.245 protocol dissector affecting versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 of a software. The crash can be triggered remotely and leads to a denial of service condition.

Detection Guidance

This vulnerability is related to a H.245 protocol dissector crash in specific versions of a software. Detection may involve monitoring for crashes or unusual behavior in the affected software versions (4.6.0 to 4.6.7 and 4.4.0 to 4.4.18). Check logs for segmentation faults or application crashes during H.245 protocol handling.

Impact Analysis

The vulnerability allows an attacker to cause a denial of service by crashing the affected software, potentially disrupting services that rely on the H.245 protocol. This could lead to service unavailability or downtime.

Compliance Impact

This vulnerability causes a denial of service due to a crash in the H.245 protocol dissector. It does not directly affect compliance with GDPR or HIPAA as it is a system availability issue rather than a data privacy or security breach. However, prolonged downtime could indirectly impact compliance by disrupting services that handle protected data.

Mitigation Strategies

Update affected systems to versions outside the vulnerable range (4.6.0 to 4.6.7 and 4.4.0 to 4.4.18). Disable H.245 protocol handling if not required to reduce attack surface.

Hi! I’m here to help you understand CVE-2026-76927. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70