Out of Bounds Read in Intel Wireless Bluetooth Products
CVE-2021-23179

7.1HIGH

Key Information:

Vendor
Intel
Status
Intel(r) Wireless Bluetooth(r) And Killer(tm) Bluetooth(r) Products
Vendor
CVE Published:
18 August 2022

Summary

A vulnerability exists in the firmware of certain Intel Wireless Bluetooth and Killer Bluetooth products, allowing a privileged user to potentially exploit an out of bounds read condition. This issue could lead to unauthorized information disclosure via local access, emphasizing the need for users to update to the latest firmware version to mitigate risks associated with this vulnerability.

Affected Version(s)

Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.