TI-2018-02681 Aliases CVE-2018-3666 GHSA-ghqp-4375-rwc7

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially…

LOW 38Published 2018-08-01 · Updated 2024-09-17

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow.

Why it matters now

EPSS 0.00377 31st percentileScored 2026-11-07

Fix Fixed Smart Sound Technology (Intel Corporation): 9.21.00.3541

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Intel	Smart Sound Technology	before 9.21.00.3541	9.21.00.3541	Patch available	CNA

Smart Sound Technology VendorIntel Affected before 9.21.00.3541 Fixed in 9.21.00.3541 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:o:intel:intel_smart_sound_technology::::::::	before 9.21.00.3541	Vulnerable	Intel

cpe:2.3:o:intel:intel_smart_sound_technology:*:*:*:*:*:*:*:* Versions before 9.21.00.3541 Vulnerable ·Intel

Remediation

Fix · CNA Smart Sound Technology (Intel Corporation) Fixed in 9.21.00.3541

Timeline

2026-10-02 Threatist record created from CVE-2018-3666
2026-10-03 Alias added: GHSA-ghqp-4375-rwc7

References

Advisory 1

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00163.html

TI-2018-02687 Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially… CVSS 3.0HIGH 8.8
TI-2018-02685 Memory corruption in Intel Smart Sound Technology CVSS 3.0HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences