CVE-2021-27803
- State
- Published
- Severity
- 7.5 High
- Published
- Feb 26, 2021
- Updated
- Dec 18, 2025
- Reserved
- Feb 26, 2021
Description
A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://www.openwall.com/lists/oss-security/2021/02/25/3
- https://w1.fi/security/2021-1/wpa_supplicant-p2p-provision-discovery-processing-vulnerability.txt
- https://w1.fi/security/2021-1/0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch
- [oss-security] 20210227 Re: wpa_supplicant P2P provision discovery processing vulnerabilitymailing-list
- FEDORA-2021-3430f96019vendor-advisory
- [debian-lts-announce] 20210302 [SECURITY] [DLA 2581-1] wpa security updatemailing-list
- FEDORA-2021-99cad2b81fvendor-advisory
- FEDORA-2021-9b00febe54vendor-advisory
- DSA-4898vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.