{"id":"CVE-2022-28667","aliases":["EUVD-2022-33109","GHSA-643m-x882-mgjq","UBUNTU-CVE-2022-28667"],"status":"published","title":"Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may...","description":"Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00336,"percentile":0.27127,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2022-11-11T15:49:14Z","modified":"2026-10-17T12:56:21Z","affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.116","1.117","1.118","1.119","1.121","1.122","1.123","1.124","1.125","1.126","1.127","1.127.2","1.127.3","1.127.4","1.127.5","1.127.6","1.127.7","1.127.8","1.127.10","1.127.11","1.127.12","1.127.13","1.127.14","1.127.15","1.127.16","1.127.18","1.127.19","1.127.20","1.127.22","1.127.23","1.127.24"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.149","1.150","1.152","1.153","1.154","1.155","1.156","1.157","1.157.1","1.157.2","1.157.3","1.157.4","1.157.5","1.157.6","1.157.8","1.157.10","1.157.11","1.157.12","1.157.13","1.157.14","1.157.15","1.157.16","1.157.17","1.157.18","1.157.19","1.157.20","1.157.21","1.157.22","1.157.23"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.169","1.170","1.171","1.172","1.173","1.173.1","1.173.2","1.173.3","1.173.5","1.173.6","1.173.8","1.173.9","1.173.12","1.173.13","1.173.14","1.173.15","1.173.16","1.173.17","1.173.18","1.173.19","1.173.20","1.173.21"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.183","1.183.1","1.183.2","1.184","1.185","1.186","1.187","1.187.1","1.187.2","1.187.3","1.187.4","1.187.6","1.187.7","1.187.8","1.187.9","1.187.10","1.187.11","1.187.12","1.187.14","1.187.15","1.187.16","1.187.17","1.187.19","1.187.20","1.187.23","1.187.24","1.187.25","1.187.26","1.187.27","1.187.29","1.187.30","1.187.31","1.187.32","1.187.33","1.187.34","1.187.35","1.187.36","1.187.38","1.187.39"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.201","1.202","1.204","20220124.git0c6a7b3b-0ubuntu1","20220217.git6342082c-0ubuntu1","20220217.git6342082c-0ubuntu3","20220302.gitee0667aa-0ubuntu1","20220314.gitcd01f857-0ubuntu1","20220314.gitcd01f857-0ubuntu2","20220329.git681281e4-0ubuntu1","20220329.git681281e4-0ubuntu3","20220329.git681281e4-0ubuntu3.2","20220329.git681281e4-0ubuntu3.3","20220329.git681281e4-0ubuntu3.4","20220329.git681281e4-0ubuntu3.5","20220329.git681281e4-0ubuntu3.6","20220329.git681281e4-0ubuntu3.7","20220329.git681281e4-0ubuntu3.9","20220329.git681281e4-0ubuntu3.10","20220329.git681281e4-0ubuntu3.11","20220329.git681281e4-0ubuntu3.12","20220329.git681281e4-0ubuntu3.13","20220329.git681281e4-0ubuntu3.14","20220329.git681281e4-0ubuntu3.16","20220329.git681281e4-0ubuntu3.17","20220329.git681281e4-0ubuntu3.18","20220329.git681281e4-0ubuntu3.19","20220329.git681281e4-0ubuntu3.21","20220329.git681281e4-0ubuntu3.22","20220329.git681281e4-0ubuntu3.23","20220329.git681281e4-0ubuntu3.24","20220329.git681281e4-0ubuntu3.26","20220329.git681281e4-0ubuntu3.29","20220329.git681281e4-0ubuntu3.30","20220329.git681281e4-0ubuntu3.31","20220329.git681281e4-0ubuntu3.34","20220329.git681281e4-0ubuntu3.35","20220329.git681281e4-0ubuntu3.36","20220329.git681281e4-0ubuntu3.37","20220329.git681281e4-0ubuntu3.38","20220329.git681281e4-0ubuntu3.39","20220329.git681281e4-0ubuntu3.40","20220329.git681281e4-0ubuntu3.41","20220329.git681281e4-0ubuntu3.42"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20230919.git3672ccab-0ubuntu2.1","20230919.git3672ccab-0ubuntu2.2","20240202.git36777504-0ubuntu1","20240318.git3b128b60-0ubuntu1","20240318.git3b128b60-0ubuntu2","20240318.git3b128b60-0ubuntu2.1","20240318.git3b128b60-0ubuntu2.2","20240318.git3b128b60-0ubuntu2.3","20240318.git3b128b60-0ubuntu2.4","20240318.git3b128b60-0ubuntu2.5","20240318.git3b128b60-0ubuntu2.6","20240318.git3b128b60-0ubuntu2.7","20240318.git3b128b60-0ubuntu2.9","20240318.git3b128b60-0ubuntu2.10","20240318.git3b128b60-0ubuntu2.11","20240318.git3b128b60-0ubuntu2.12","20240318.git3b128b60-0ubuntu2.13","20240318.git3b128b60-0ubuntu2.14","20240318.git3b128b60-0ubuntu2.15","20240318.git3b128b60-0ubuntu2.17","20240318.git3b128b60-0ubuntu2.19","20240318.git3b128b60-0ubuntu2.21","20240318.git3b128b60-0ubuntu2.22","20240318.git3b128b60-0ubuntu2.23","20240318.git3b128b60-0ubuntu2.25","20240318.git3b128b60-0ubuntu2.26","20240318.git3b128b60-0ubuntu2.27","20240318.git3b128b60-0ubuntu2.29","20240318.git3b128b60.0ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20250317.git1d4c88ee-0ubuntu1","20250606.git3b75d677-0ubuntu1","20250701.gite2dad11e-0ubuntu1","20250711.git99d64b4f-0ubuntu1","20250807.gitb6b0b152-0ubuntu1","20250818.git07ed893d-0ubuntu1","20250901.git993ff19b-0ubuntu1","20250901.git993ff19b-0ubuntu1.2","20250901.git993ff19b-0ubuntu1.4","20250901.git993ff19b-0ubuntu1.5","20250901.git993ff19b-0ubuntu1.6","20250901.git993ff19b-0ubuntu1.7","20250901.git993ff19b-0ubuntu1.9","20250901.git993ff19b-0ubuntu1.10","20250901.git993ff19b-0ubuntu1.11"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20260319.git217ca6e4.1ubuntu","20260709.git2c35b1ed.1ubuntu","20260818.giteeed587f.1ubuntu","20260911.giteeccccbe.1ubuntu","20260915.git1522c78a.1ubuntu"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20250901.git993ff19b-0ubuntu1","20251009.git46a6999a-0ubuntu1","20251029.git4f72031f-0ubuntu1","20251125.gitff6418d1-0ubuntu1","20260108.gitd86b47f7-0ubuntu1","20260123.git1b7b9f6c.0ubuntu","20260227.gitd8e138dd.0ubuntu","20260319.git217ca6e4.0ubuntu","20260319.git217ca6e4.1ubuntu"]}],"products":[{"vendor":"intel","product":"dual_band_wireless-ac_3165_firmware"},{"vendor":"intel","product":"dual_band_wireless-ac_3168_firmware"},{"vendor":"intel","product":"dual_band_wireless-ac_8260_firmware"},{"vendor":"intel","product":"dual_band_wireless-ac_8265_firmware"},{"vendor":"intel","product":"wi-fi_6e_ax200_firmware"},{"vendor":"intel","product":"wi-fi_6e_ax201_firmware"},{"vendor":"intel","product":"wi-fi_6e_ax210_firmware"},{"vendor":"intel","product":"wi-fi_6e_ax211_firmware"},{"vendor":"intel","product":"wi-fi_6e_ax411_firmware"},{"vendor":"intel","product":"wireless-ac_9260_firmware"},{"vendor":"intel","product":"wireless-ac_9461_firmware"},{"vendor":"intel","product":"wireless-ac_9462_firmware"},{"vendor":"intel","product":"wireless-ac_9560_firmware"},{"vendor":"intel","product":"wireless_7265_\\(rev_d\\)_firmware"},{"vendor":"intel corporation","product":"intel(r) proset/wireless wifi software"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00687.html","tags":["x_transferred","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28667"},{"url":"https://github.com/advisories/GHSA-643m-x882-mgjq"},{"url":"https://ubuntu.com/security/CVE-2022-28667","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28667","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-28667","description":"Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access.","status":"published","published":"2022-11-11T15:49:14.818Z","modified":"2025-01-29T20:44:31.734Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:34:39.233406Z"}],"euvd":[{"id":"EUVD-2022-33109","description":"Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access.","status":"published","published":"2022-11-11T15:49:14Z","modified":"2025-01-29T20:44:31Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:04:09.506854Z"}],"ghsa":[{"id":"GHSA-643m-x882-mgjq","title":"Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may...","description":"Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access.","status":"published","published":"2022-11-11T19:00:31Z","modified":"2023-01-28T05:03:17Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:43:57.015581Z"}],"nvd":[{"id":"CVE-2022-28667","description":"Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access.","status":"published","published":"2022-11-11T16:15:14.027Z","modified":"2026-06-17T04:38:49.02Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:31.914793Z"}],"osv":[{"id":"UBUNTU-CVE-2022-28667","description":"Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access.","status":"published","published":"2022-11-11T16:15:00Z","modified":"2026-10-17T12:56:21.488166848Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:53.899276Z"}]}}