Back to CVE records
High 8.8Published Nov 12, 2020

CVE-2020-12321Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Updated under an hour ago ()

Does this affect you?

It affects intel dual_band_wireless-ac_3168_firmware and 10 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CVSS
8.8 HIGH (v3.1, NVD)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
intel
NVD analysis
Modified
Record last updated
Oct 8, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
intel dual_band_wireless-ac_3168_firmware
intel:dual_band_wireless-ac_3168_firmware
before 21.110
NVD
intel dual_band_wireless-ac_8260_firmware
intel:dual_band_wireless-ac_8260_firmware
before 21.110
NVD
intel dual_band_wireless-ac_8265_firmware
intel:dual_band_wireless-ac_8265_firmware
before 21.110
NVD
intel wi-fi_6_ax200_firmware
intel:wi-fi_6_ax200_firmware
before 21.110
NVD
intel wi-fi_6_ax201_firmware
intel:wi-fi_6_ax201_firmware
before 21.110
NVD
intel wireless-ac_9260_firmware
intel:wireless-ac_9260_firmware
before 21.110
NVD
intel wireless-ac_9461_firmware
intel:wireless-ac_9461_firmware
before 21.110
NVD
intel wireless-ac_9462_firmware
intel:wireless-ac_9462_firmware
before 21.110
NVD
intel wireless-ac_9560_firmware
intel:wireless-ac_9560_firmware
before 21.110
NVD
intel wireless_7265_(rev_d)_firmware
intel:wireless_7265_(rev_d)_firmware
before 21.110
NVD
intel dual_band_wireless-ac_3165_firmware
intel:dual_band_wireless-ac_3165_firmware
before 21.110
NVD

References

  • x-refsource-misc

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.