CVE-2026-76917 Wireshark Foundation CVE debrief

Who should care

Wireshark users and administrators, network security teams, and vulnerability management teams should review and apply security updates to prevent potential denial of service attacks. Affected operators include those managing Wireshark installations in production environments. Vulnerability management teams should prioritize patching and monitor for signs of exploitation.

Technical summary

The Bluetooth AVRCP Profile protocol dissector in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 crashes when processing certain protocol messages, allowing a remote attacker to cause a denial of service. This vulnerability affects Wireshark installations and can be mitigated by applying security updates.

Defensive priority

Medium-priority defensive review recommended due to potential service disruption.

Recommended defensive actions

• Review and apply Wireshark security updates for versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18
• Implement compensating controls to detect and prevent potential denial of service attacks
• Monitor Wireshark installations for signs of exploitation

Evidence notes

Official CVE Program record and NVD vulnerability detail page confirm Bluetooth AVRCP Profile protocol dissector crash vulnerability in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18, allowing denial of service. Evidence is limited to public CVE and NVD records. Defenders should verify Wireshark installations, review security updates, and monitor for signs of exploitation.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.