CVE-2021-26254

CWE-125 — Out-of-bounds Read3 documents3 sources

Severity

5.5MEDIUM

EPSS

0.1%

top 67.48%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Killer AC 1550 Firmware Intel Killer Wi-fi 6 Ax1650 Firmware Intel Killer Wi-fi 6E Ax1675 Firmware +7 more

Timeline

PublishedAug 18

Latest updateAug 19

Description

Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable denial of service via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages10 packages

▶CVEListV5intel(r)_proset/wireless_wifi_and_killer(tm)_wifi_productsSee references

▶NVDintel/killer_ac_1550_firmware< 3.1122.1105

▶NVDintel/killer_wi-fi_6_ax1650_firmware< 3.1122.1105

▶NVDintel/proset_wi-fi_6e_ax210_firmware< 22.120

▶NVDintel/killer_wi-fi_6e_ax1675_firmware< 3.1122.1105

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

GHSA

GHSA-ww3q-xfc6-7g7h: Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable denial of ser↗2022-08-19

▶

CVEList

CVE-2021-26254: Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable denial of ser↗2022-08-18

▶