{"id":"CVE-2021-26950","aliases":["EUVD-2021-13731","GHSA-r8qv-vp2v-88wh"],"status":"published","title":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R...","description":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00195,"percentile":0.09284,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2022-08-18T19:44:19Z","modified":"2026-06-17T03:44:03Z","products":[{"vendor":"intel","product":"dual_band_wireless-ac_3165_firmware"},{"vendor":"intel","product":"dual_band_wireless-ac_3168_firmware"},{"vendor":"intel","product":"dual_band_wireless-ac_8260_firmware"},{"vendor":"intel","product":"dual_band_wireless-ac_8265_firmware"},{"vendor":"intel","product":"killer_wi-fi_6_ax1650_firmware"},{"vendor":"intel","product":"killer_wi-fi_6e_ax1675_firmware"},{"vendor":"intel","product":"killer_wi-fi_6e_ax1690_firmware"},{"vendor":"intel","product":"killer_wireless-ac_1550_firmware"},{"vendor":"intel","product":"wi-fi_6_ax200_firmware"},{"vendor":"intel","product":"wi-fi_6_ax201_firmware"},{"vendor":"intel","product":"wi-fi_6_ax210_firmware"},{"vendor":"intel","product":"wi-fi_6_ax211_firmware"},{"vendor":"intel","product":"wi-fi_6_ax411_firmware"},{"vendor":"intel","product":"wireless-ac_9260_firmware"},{"vendor":"intel","product":"wireless-ac_9461_firmware"},{"vendor":"intel","product":"wireless-ac_9462_firmware"},{"vendor":"intel","product":"wireless-ac_9560_firmware"},{"vendor":"intel","product":"wireless_7265_firmware"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26950"},{"url":"https://github.com/advisories/GHSA-r8qv-vp2v-88wh"}],"sources":{"cve":[{"id":"CVE-2021-26950","description":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.","status":"published","published":"2022-08-18T19:44:19Z","modified":"2025-05-05T16:53:21.879Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:32:57.368269Z"}],"euvd":[{"id":"EUVD-2021-13731","description":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.","status":"published","published":"2022-08-18T19:44:19Z","modified":"2025-05-05T16:53:21Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:56.053822Z"}],"ghsa":[{"id":"GHSA-r8qv-vp2v-88wh","title":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R...","description":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.","status":"published","published":"2022-08-19T00:00:19Z","modified":"2023-01-31T05:07:32Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:49:14.096889Z"}],"nvd":[{"id":"CVE-2021-26950","description":"Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.","status":"published","published":"2022-08-18T20:15:09.41Z","modified":"2026-06-17T03:44:03.617Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:06.906968Z"}]}}