CVE-2026-76884 is a buffer over-read vulnerability in the ERF file parser component of Wireshark Foundation's Wireshark software. It affects versions 4.4.0 up to but not including 4.4.18 and versions 4.6.0 up to but not including 4.6.8. The flaw allows crafted ERF files to cause the parser to read beyond the intended buffer boundaries, leading to a crash and denial of service. The CVSS 3.1 base score is 3.1, indicating low severity, with network attack vector, high attack complexity, no privileges required, user interaction required, and no impact on confidentiality or integrity, only availability.

Successful exploitation causes a denial of service by crashing the Wireshark application when parsing malicious ERF files. There is no impact on confidentiality or integrity. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid opening untrusted ERF files with affected Wireshark versions to prevent denial of service.