CVE-2026-20745: Intel PROSet/Wireless WiFi Software out-of-bounds write in device drivers

CVE-2026-20745 · Severity: high · CVSS 7.4 · Published 2026-08-11

Technologies: Intel Wi-Fi 7 Be211, Intel Wi-Fi 7 Be200, Intel Wireless Wifi, Intel Killer Wi-Fi 7 Be1775i\/S, Intel Wireless-Ac 9462, Intel Killer Wi-Fi 7 Be1750i\/S, Intel Wi-Fi 7 Be201, Intel Wi-Fi 7 Be213, Intel Killer Wi-Fi 6e Ax1675i\/S, Intel Proset\, Intel PROSet/Wireless WiFi Software, Intel Wi-Fi 6 Ax200, Intel Killer Wi-Fi 6e Ax1675x\/W, Intel Wireless-Ac 9560, Intel Wi-Fi 6e Ax211, Intel Killer Wi-Fi 6 Ax1650i\/S, Intel Wireless-Ac 9461, Intel Wi-Fi 6 Ax210, Intel Wi-Fi 6 Ax201, Intel Killer Wi-Fi 7 Be1750x\/W. Vendors: Intel.

Executive brief

Intel PROSet/Wireless WiFi Software includes device drivers that connect Windows computers to wireless networks. A network-based attacker can trigger an out-of-bounds memory write in these drivers without authentication, causing the system to crash or become unresponsive. The vulnerability requires the attacker to be on the same network segment (adjacent access) but no special privileges or user interaction.

Technical details

An out-of-bounds write vulnerability exists in the Ring 2 device drivers of Intel PROSet/Wireless WiFi Software for Windows (CVE-2026-20745). The flaw allows an unauthenticated network adversary with adjacent access to trigger a denial of service condition. Attack complexity is low and no user interaction is required. The vulnerability impacts system availability (high) and has minor integrity implications; confidentiality is not affected. Patches are available from Intel.

Affected products

Intel PROSet/Wireless WiFi Software some versions for Windows

Timeline

2026-08-11: disclosed
2026-08-11: advisory: INTEL-SA-01422

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01422.html