CVE-2021-26257 : Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products be

Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.

Published 2022-08-18 20:15:09

Updated 2022-08-24 16:30:32

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: OverflowDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2021-26257

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 11 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-26257

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2021-26257

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Assigned by: nvd@nist.gov (Primary)

Products affected by CVE-2021-26257

Intel » Wi-fi 6 Ax201 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:wi-fi_6_ax201_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Wi-fi 6 Ax201 » Version: N/A
Intel » Wi-fi 6 Ax200 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:wi-fi_6_ax200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Wi-fi 6 Ax200 » Version: N/A
Intel » Wireless-ac 9560 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:wireless-ac_9560_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Wireless-ac 9560 » Version: N/A
Intel » Wireless-ac 9462 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:wireless-ac_9462_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Wireless-ac 9462 » Version: N/A
Intel » Wireless-ac 9461 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:wireless-ac_9461_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Wireless-ac 9461 » Version: N/A
Intel » Wireless-ac 9260 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:wireless-ac_9260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Wireless-ac 9260 » Version: N/A
Intel » Dual Band Wireless-ac 8265 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:dual_band_wireless-ac_8265_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Dual Band Wireless-ac 8265 » Version: N/A
Intel » Dual Band Wireless-ac 8260 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:dual_band_wireless-ac_8260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Dual Band Wireless-ac 8260 » Version: N/A
Intel » Dual Band Wireless-ac 3168 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:dual_band_wireless-ac_3168_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Dual Band Wireless-ac 3168 » Version: N/A
Intel » Dual Band Wireless-ac 3165 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:dual_band_wireless-ac_3165_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Dual Band Wireless-ac 3165 » Version: N/A
Intel » Killer Wi-fi 6 Ax1650 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:killer_wi-fi_6_ax1650_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Killer Wi-fi 6 Ax1650 » Version: N/A
Intel » Killer Wi-fi 6e Ax1675 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:killer_wi-fi_6e_ax1675_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Killer Wi-fi 6e Ax1675 » Version: N/A
Intel » Wi-fi 6 Ax411 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:wi-fi_6_ax411_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Wi-fi 6 Ax411 » Version: N/A
Intel » Wi-fi 6 Ax211 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:wi-fi_6_ax211_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Wi-fi 6 Ax211 » Version: N/A
Intel » Wi-fi 6 Ax210 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:wi-fi_6_ax210_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Wi-fi 6 Ax210 » Version: N/A
Intel » Wireless 7265 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:wireless_7265_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Wireless 7265 » Version: N/A
Intel » Killer Wi-fi 6e Ax1690 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:killer_wi-fi_6e_ax1690_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Killer Wi-fi 6e Ax1690 » Version: N/A
Intel » Killer Wireless-ac 1550 Firmware
Versions before (<) 22.120
cpe:2.3:o:intel:killer_wireless-ac_1550_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Killer Wireless-ac 1550 » Version: N/A

Vulnerability Details : CVE-2021-26257

Exploit prediction scoring system (EPSS) score for CVE-2021-26257

CVSS scores for CVE-2021-26257

CWE ids for CVE-2021-26257

References for CVE-2021-26257

Products affected by CVE-2021-26257