CVE-2026-76885 is a buffer over-read vulnerability in the Tektronix K12xx file parser component of Wireshark. It affects versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18. The flaw can be triggered by processing crafted files, leading to a crash of the Wireshark application and causing denial of service. The CVSS 3.1 base score is 3.1, reflecting low severity due to the requirement for user interaction and high attack complexity. There is no indication of confidentiality or integrity impact. No official patch or remediation level has been published as of the data provided.

The vulnerability allows an attacker to cause a denial of service by crashing Wireshark when it processes specially crafted Tektronix K12xx files. There is no impact on confidentiality or integrity. Exploitation requires user interaction and has high attack complexity, limiting the risk to availability only and resulting in a low severity rating.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening untrusted Tektronix K12xx files with affected versions of Wireshark. Monitor vendor communications for updates on patches or workarounds.