{"id":"CVE-2021-23179","aliases":["EUVD-2021-10289","GHSA-wp5q-xcpm-22jf"],"status":"published","title":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R...","description":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow a privileged user to potentially enable information disclosure via local access.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00213,"percentile":0.11775,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2022-08-18T19:44:27Z","modified":"2026-06-17T03:38:23Z","products":[{"vendor":"intel","product":"dual_band_wireless-ac_3165_firmware"},{"vendor":"intel","product":"dual_band_wireless-ac_3168_firmware"},{"vendor":"intel","product":"dual_band_wireless-ac_8260_firmware"},{"vendor":"intel","product":"dual_band_wireless-ac_8265_firmware"},{"vendor":"intel","product":"killer_wi-fi_6_ax1650_firmware"},{"vendor":"intel","product":"killer_wi-fi_6e_ax1675_firmware"},{"vendor":"intel","product":"killer_wi-fi_6e_ax1690_firmware"},{"vendor":"intel","product":"killer_wireless-ac_1550_firmware"},{"vendor":"intel","product":"wi-fi_6_ax200_firmware"},{"vendor":"intel","product":"wi-fi_6_ax201_firmware"},{"vendor":"intel","product":"wi-fi_6_ax210_firmware"},{"vendor":"intel","product":"wi-fi_6_ax211_firmware"},{"vendor":"intel","product":"wi-fi_6_ax411_firmware"},{"vendor":"intel","product":"wireless-ac_9260_firmware"},{"vendor":"intel","product":"wireless-ac_9461_firmware"},{"vendor":"intel","product":"wireless-ac_9462_firmware"},{"vendor":"intel","product":"wireless-ac_9560_firmware"},{"vendor":"intel","product":"wireless_7265_firmware"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23179"},{"url":"https://github.com/advisories/GHSA-wp5q-xcpm-22jf"}],"sources":{"cve":[{"id":"CVE-2021-23179","description":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow a privileged user to potentially enable information disclosure via local access.","status":"published","published":"2022-08-18T19:44:27Z","modified":"2025-05-05T16:54:32.006Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:33:00.819444Z"}],"euvd":[{"id":"EUVD-2021-10289","description":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow a privileged user to potentially enable information disclosure via local access.","status":"published","published":"2022-08-18T19:44:27Z","modified":"2025-05-05T16:54:32Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:56.053822Z"}],"ghsa":[{"id":"GHSA-wp5q-xcpm-22jf","title":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R...","description":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow a privileged user to potentially enable information disclosure via local access.","status":"published","published":"2022-08-19T00:00:19Z","modified":"2023-01-29T05:03:57Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:45:26.555782Z"}],"nvd":[{"id":"CVE-2021-23179","description":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow a privileged user to potentially enable information disclosure via local access.","status":"published","published":"2022-08-18T20:15:09.183Z","modified":"2026-06-17T03:38:23.407Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:06.906968Z"}]}}