{"id":"CVE-2020-12321","title":"Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.","summary":"Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","vendor":"intel","product":"dual_band_wireless-ac_3168_firmware","affected":["dual_band_wireless-ac_3168_firmware < 21.110","dual_band_wireless-ac_8260_firmware < 21.110","dual_band_wireless-ac_8265_firmware < 21.110","wi-fi_6_ax200_firmware < 21.110","wi-fi_6_ax201_firmware < 21.110","wireless-ac_9260_firmware < 21.110","wireless-ac_9461_firmware < 21.110","wireless-ac_9462_firmware < 21.110","wireless-ac_9560_firmware < 21.110","wireless_7265_(rev_d)_firmware < 21.110","dual_band_wireless-ac_3165_firmware < 21.110"],"patched":["dual_band_wireless-ac_3168_firmware 21.110","dual_band_wireless-ac_8260_firmware 21.110","dual_band_wireless-ac_8265_firmware 21.110","wi-fi_6_ax200_firmware 21.110","wi-fi_6_ax201_firmware 21.110","wireless-ac_9260_firmware 21.110","wireless-ac_9461_firmware 21.110","wireless-ac_9462_firmware 21.110","wireless-ac_9560_firmware 21.110","wireless_7265_(rev_d)_firmware 21.110","dual_band_wireless-ac_3165_firmware 21.110"],"published":"2020-11-12","updated":"2026-10-08","sourceUpdated":"2026-10-08T22:16:56.387","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-12321","references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403","label":"secure@intel.com"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-12321.json"},{"url":"https://access.redhat.com/security/cve/CVE-2020-12321"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1893914"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-12321"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12321"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403.html"},{"url":"https://access.redhat.com/errata/RHSA-2021:0339"},{"url":"https://access.redhat.com/errata/RHSA-2022:7887"},{"url":"https://access.redhat.com/errata/RHSA-2021:0183"},{"url":"https://access.redhat.com/errata/RHSA-2020:5416"},{"url":"https://access.redhat.com/errata/RHSA-2020:5479"}],"tags":["nvd","csaf","vex","red-hat","cve.org"],"epss":0.00982,"epssPercentile":0.62105,"ingestedAt":"2026-10-08T23:16:47.309Z","cwe":["CWE-120"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-08T21:11:28.505580Z"},"slug":"CVE-2020-12321","body":"## Overview\n\nImproper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.\n\n## Affected\n\n- `dual_band_wireless-ac_3168_firmware < 21.110`\n- `dual_band_wireless-ac_8260_firmware < 21.110`\n- `dual_band_wireless-ac_8265_firmware < 21.110`\n- `wi-fi_6_ax200_firmware < 21.110`\n- `wi-fi_6_ax201_firmware < 21.110`\n- `wireless-ac_9260_firmware < 21.110`\n- `wireless-ac_9461_firmware < 21.110`\n- `wireless-ac_9462_firmware < 21.110`\n- `wireless-ac_9560_firmware < 21.110`\n- `wireless_7265_(rev_d)_firmware < 21.110`\n- `dual_band_wireless-ac_3165_firmware < 21.110`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `dual_band_wireless-ac_3168_firmware 21.110`\n- `dual_band_wireless-ac_8260_firmware 21.110`\n- `dual_band_wireless-ac_8265_firmware 21.110`\n- `wi-fi_6_ax200_firmware 21.110`\n- `wi-fi_6_ax201_firmware 21.110`\n- `wireless-ac_9260_firmware 21.110`\n- `wireless-ac_9461_firmware 21.110`\n- `wireless-ac_9462_firmware 21.110`\n- `wireless-ac_9560_firmware 21.110`\n- `wireless_7265_(rev_d)_firmware 21.110`\n- `dual_band_wireless-ac_3165_firmware 21.110`\n\n## Vendor advisories\n\n- **RHSA-2021:0339** · Red Hat · fixed in: Red Hat Enterprise Linux Client (v. 7), Red Hat Enterprise Linux Server (v. 7), Red Hat Enterprise Linux Workstation (v. 7) · released 2021-02-02 · [advisory](https://access.redhat.com/errata/RHSA-2021:0339)\n- **RHSA-2022:7887** · Red Hat · fixed in: Red Hat Enterprise Linux Server AUS (v. 7.7), Red Hat Enterprise Linux Server E4S (v. 7.7), Red Hat Enterprise Linux Server TUS (v. 7.7) · released 2022-11-09 · [advisory](https://access.redhat.com/errata/RHSA-2022:7887)\n- **RHSA-2021:0183** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS EUS (v. 8.1) · released 2021-01-19 · [advisory](https://access.redhat.com/errata/RHSA-2021:0183)\n- **RHSA-2020:5416** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS EUS (v. 8.2) · released 2020-12-15 · [advisory](https://access.redhat.com/errata/RHSA-2020:5416)\n- **RHSA-2020:5479** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8) · released 2020-12-15 · [advisory](https://access.redhat.com/errata/RHSA-2020:5479)","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":48.4,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}