CVE-2021-26950

CWE-125 — Out-of-bounds Read3 documents3 sources

Severity

5.5MEDIUM

EPSS

0.1%

top 83.19%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Dual Band Wireless-ac 3165 Firmware Intel Dual Band Wireless-ac 3168 Firmware Intel Dual Band Wireless-ac 8260 Firmware +15 more

Timeline

PublishedAug 18

Latest updateAug 19

Description

Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages19 packages

▶CVEListV5intel(r)_wireless_bluetooth(r)_and_killer(tm)_bluetooth(r)_productsbefore version 22.120

▶NVDintel/killer_wireless-ac_1550_firmware< 22.120

▶NVDintel/wireless_7265_firmware< 22.120

▶NVDintel/wireless-ac_9260_firmware< 22.120

▶NVDintel/wireless-ac_9461_firmware< 22.120

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

GHSA

GHSA-r8qv-vp2v-88wh: Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22↗2022-08-19

▶

CVEList

CVE-2021-26950: Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22↗2022-08-18

▶