CVE-2021-26257

CWE-119 — Buffer Overflow CWE-4154 documents4 sources

Severity

5.5MEDIUM

EPSS

0.1%

top 83.19%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Dual Band Wireless-ac 3165 Firmware Intel Dual Band Wireless-ac 3168 Firmware Intel Dual Band Wireless-ac 8260 Firmware +15 more

Timeline

PublishedAug 18

Latest updateApr 9

Description

Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages19 packages

▶CVEListV5intel(r)_wireless_bluetooth(r)_and_killer(tm)_bluetooth(r)_productsbefore version 22.120

▶NVDintel/killer_wireless-ac_1550_firmware< 22.120

▶NVDintel/wireless_7265_firmware< 22.120

▶NVDintel/wireless-ac_9260_firmware< 22.120

▶NVDintel/wireless-ac_9461_firmware< 22.120

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

GHSA

GHSA-x3gx-7gmp-75hw: Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22↗2022-08-19

▶

CVEList

CVE-2021-26257: Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22↗2022-08-18

▶

📋Vendor Advisories

Microsoft

Microsoft Excel Remote Code Execution Vulnerability↗2024-04-09

▶