---
id: CVE-2020-12321
title: >-
  Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products
  before version 21.110 may allow an unauthenticated user to potentially enable
  escalation of privilege via adjacent access.
summary: >-
  Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products
  before version 21.110 may allow an unauthenticated user to potentially enable
  escalation of privilege via adjacent access.
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
vendor: intel
product: dual_band_wireless-ac_3168_firmware
affected:
  - dual_band_wireless-ac_3168_firmware < 21.110
  - dual_band_wireless-ac_8260_firmware < 21.110
  - dual_band_wireless-ac_8265_firmware < 21.110
  - wi-fi_6_ax200_firmware < 21.110
  - wi-fi_6_ax201_firmware < 21.110
  - wireless-ac_9260_firmware < 21.110
  - wireless-ac_9461_firmware < 21.110
  - wireless-ac_9462_firmware < 21.110
  - wireless-ac_9560_firmware < 21.110
  - wireless_7265_(rev_d)_firmware < 21.110
  - dual_band_wireless-ac_3165_firmware < 21.110
patched:
  - dual_band_wireless-ac_3168_firmware 21.110
  - dual_band_wireless-ac_8260_firmware 21.110
  - dual_band_wireless-ac_8265_firmware 21.110
  - wi-fi_6_ax200_firmware 21.110
  - wi-fi_6_ax201_firmware 21.110
  - wireless-ac_9260_firmware 21.110
  - wireless-ac_9461_firmware 21.110
  - wireless-ac_9462_firmware 21.110
  - wireless-ac_9560_firmware 21.110
  - wireless_7265_(rev_d)_firmware 21.110
  - dual_band_wireless-ac_3165_firmware 21.110
published: '2020-11-12'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T22:16:56.387'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2020-12321'
references:
  - url: >-
      https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403
    label: secure@intel.com
  - url: >-
      https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-12321.json
  - url: 'https://access.redhat.com/security/cve/CVE-2020-12321'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=1893914'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2020-12321'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2020-12321'
  - url: >-
      https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403.html
  - url: 'https://access.redhat.com/errata/RHSA-2021:0339'
  - url: 'https://access.redhat.com/errata/RHSA-2022:7887'
  - url: 'https://access.redhat.com/errata/RHSA-2021:0183'
  - url: 'https://access.redhat.com/errata/RHSA-2020:5416'
  - url: 'https://access.redhat.com/errata/RHSA-2020:5479'
tags:
  - nvd
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.00982
epssPercentile: 0.62105
ingestedAt: '2026-10-08T23:16:47.309Z'
cwe:
  - CWE-120
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-08T21:11:28.505580Z'
---

## Overview

Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

## Affected

- `dual_band_wireless-ac_3168_firmware < 21.110`
- `dual_band_wireless-ac_8260_firmware < 21.110`
- `dual_band_wireless-ac_8265_firmware < 21.110`
- `wi-fi_6_ax200_firmware < 21.110`
- `wi-fi_6_ax201_firmware < 21.110`
- `wireless-ac_9260_firmware < 21.110`
- `wireless-ac_9461_firmware < 21.110`
- `wireless-ac_9462_firmware < 21.110`
- `wireless-ac_9560_firmware < 21.110`
- `wireless_7265_(rev_d)_firmware < 21.110`
- `dual_band_wireless-ac_3165_firmware < 21.110`

## Remediation

Upgrade past the affected range:

- `dual_band_wireless-ac_3168_firmware 21.110`
- `dual_band_wireless-ac_8260_firmware 21.110`
- `dual_band_wireless-ac_8265_firmware 21.110`
- `wi-fi_6_ax200_firmware 21.110`
- `wi-fi_6_ax201_firmware 21.110`
- `wireless-ac_9260_firmware 21.110`
- `wireless-ac_9461_firmware 21.110`
- `wireless-ac_9462_firmware 21.110`
- `wireless-ac_9560_firmware 21.110`
- `wireless_7265_(rev_d)_firmware 21.110`
- `dual_band_wireless-ac_3165_firmware 21.110`

## Vendor advisories

- **RHSA-2021:0339** · Red Hat · fixed in: Red Hat Enterprise Linux Client (v. 7), Red Hat Enterprise Linux Server (v. 7), Red Hat Enterprise Linux Workstation (v. 7) · released 2021-02-02 · [advisory](https://access.redhat.com/errata/RHSA-2021:0339)
- **RHSA-2022:7887** · Red Hat · fixed in: Red Hat Enterprise Linux Server AUS (v. 7.7), Red Hat Enterprise Linux Server E4S (v. 7.7), Red Hat Enterprise Linux Server TUS (v. 7.7) · released 2022-11-09 · [advisory](https://access.redhat.com/errata/RHSA-2022:7887)
- **RHSA-2021:0183** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS EUS (v. 8.1) · released 2021-01-19 · [advisory](https://access.redhat.com/errata/RHSA-2021:0183)
- **RHSA-2020:5416** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS EUS (v. 8.2) · released 2020-12-15 · [advisory](https://access.redhat.com/errata/RHSA-2020:5416)
- **RHSA-2020:5479** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8) · released 2020-12-15 · [advisory](https://access.redhat.com/errata/RHSA-2020:5479)