CVE-2026-19695 Wireshark Foundation CVE debrief

Who should care

Organizations using Gammu DCT3 trace file parser in versions 4.6.0 to 4.6.7 should review and verify their usage. They should check for and apply vendor remediation or patches, monitor for potential denial of service attempts, and review compensating controls if patches are not immediately applicable. Security teams and vulnerability management teams should prioritize review of affected systems and coordinate with operators for remediation planning and verification of security controls effectiveness in detecting potential exploitation attempts or service disruptions. This may involve reviewing system inventories, verifying patch deployment status, and assessing the potential impact on business operations and services provided by affected systems. Additionally, operators and administrators of affected systems should be informed about the potential risks and necessary mitigation steps to ensure operational resilience and minimize potential service disruptions due to this vulnerability. Monitoring and detection capabilities should be reviewed to ensure they can identify potential exploitation attempts or service disruptions related to this vulnerability, and logs should be checked for exposed assets that need extra review and verification of security controls effectiveness in detecting potential exploitation attempts or service disruptions related to this vulnerability. This review should be conducted in the context of existing risk management processes and in accordance with organizational policies and procedures for vulnerability management and incident response. The review should also consider the potential for false positives or negatives in detection and response processes and plan accordingly to minimize potential impacts on business operations and services provided by affected systems. The goal is to ensure that affected systems are properly secured and that potential risks are mitigated to an acceptable level through a combination of technical controls, operational processes, and awareness among relevant stakeholders. This may involve coordination with external stakeholders, such as vendors, customers, or partners, to ensure that all necessary steps are 220

Technical summary

The Gammu DCT3 trace file parser in versions 4.6.0 to 4.6.7 is vulnerable to a crash, potentially allowing for denial of service. The vulnerability has been assigned a CVSS score of 4.7 and a severity of MEDIUM. This vulnerability can be triggered by a specially crafted DCT3 trace file, which can cause the parser to crash, resulting in a denial of service condition. Organizations should review and verify their usage of the Gammu DCT3 trace file parser, check for and apply vendor remediation or patches, and monitor for potential denial of service attempts.

Defensive priority

Medium-priority defensive review recommended due to potential denial of service vulnerability in Gammu DCT3 trace file parser.

Recommended defensive actions

• Review and verify Gammu DCT3 trace file parser usage in inventory
• Check for and apply vendor remediation or patches
• Monitor for potential denial of service attempts

Evidence notes

Evidence from official CVE Program record and NIST NVD detail page indicates potential denial of service vulnerability in Gammu DCT3 trace file parser, version 4.6.0 to 4.6.7. Further review of source references required. Limited source detail suggests verifying parser usage, checking for vendor patches, and monitoring for potential denial of service attempts.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.