{"id":"CVE-2021-0326","aliases":["A-172937525","ALPINE-CVE-2021-0326","ASB-A-172937525","BELL-CVE-2021-0326","DEBIAN-CVE-2021-0326","DLA-2572-1","DSA-4898-1","EUVD-2021-2945","GHSA-4wv8-p854-pjqv","MGASA-2021-0075","OESA-2021-1364","RHSA-2021:1686","RLSA-2021:1686","SUSE-SU-2021:0443-1","SUSE-SU-2021:0477-1","SUSE-SU-2021:0478-1","UBUNTU-CVE-2021-0326","USN-4734-1","USN-4734-2","openSUSE-SU-2021:0284-1","openSUSE-SU-2024:11515-1"],"status":"published","title":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds...","description":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.04973,"percentile":0.92307,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-787"],"published":"2021-02-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","exploits":[{"source":"pocgithub","id":"aemmitt-ns/skeleton","title":"aemmitt-ns/skeleton","date":"2022-01-17","url":"https://github.com/aemmitt-ns/skeleton"},{"source":"pocgithub","id":"Satheesh575555/external_wpa_supplicant_8_AOSP10_r33_CVE-2021-0326","title":"Satheesh575555/external_wpa_supplicant_8_AOSP10_r33_CVE-2021-0326","date":"2022-04-26","url":"https://github.com/Satheesh575555/external_wpa_supplicant_8_AOSP10_r33_CVE-2021-0326"},{"source":"pocgithub","id":"nanopathi/Packages_wpa_supplicant8_CVE-2021-0326","title":"nanopathi/Packages_wpa_supplicant8_CVE-2021-0326","date":"2022-04-26","url":"https://github.com/nanopathi/Packages_wpa_supplicant8_CVE-2021-0326"},{"source":"pocgithub","id":"nanopathi/wpa_supplicant_8_CVE-2021-0326.","title":"nanopathi/wpa_supplicant_8_CVE-2021-0326.","date":"2022-04-26","url":"https://github.com/nanopathi/wpa_supplicant_8_CVE-2021-0326."},{"source":"pocgithub","id":"ShaikUsaf/external_wpa_supplicant_8_AOSP10_r33CVE-2021-0326","title":"ShaikUsaf/external_wpa_supplicant_8_AOSP10_r33CVE-2021-0326","date":"2022-04-29","url":"https://github.com/ShaikUsaf/external_wpa_supplicant_8_AOSP10_r33CVE-2021-0326"}],"fixes":[{"ecosystem":"Alpine:v3.10","package":"wpa_supplicant","fixed_in":["2.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"wpa_supplicant","fixed_in":["2.9-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"wpa_supplicant","fixed_in":["2.9-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"wpa_supplicant","fixed_in":["2.9-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"wpa_supplicant","fixed_in":["2.9-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"wpa_supplicant","fixed_in":["2.9-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"wpa_supplicant","fixed_in":["2.9-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"wpa_supplicant","fixed_in":["2.9-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"wpa_supplicant","fixed_in":["2.9-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"wpa_supplicant","fixed_in":["2.9-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"wpa_supplicant","fixed_in":["2.9-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"wpa_supplicant","fixed_in":["2.9-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"wpa_supplicant","fixed_in":["2.9-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"wpa_supplicant","fixed_in":["2.9-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"wpa_supplicant","fixed_in":["2.9-r10"],"sources":["osv"]},{"ecosystem":"Android","package":"platform/external/wpa_supplicant_8","fixed_in":["8.0:2021-02-01","8.1:2021-02-01","9:2021-02-01","10:2021-02-01","11:2021-02-01"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"wpa","fixed_in":["2:2.9.0-17"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wpa","fixed_in":["2:2.9.0-17"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpa","fixed_in":["2:2.9.0-17"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"wpa","fixed_in":["2:2.4-1+deb9u8"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"wpa_supplicant","fixed_in":["2.9-1.3.mga7"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"wpa_supplicant","fixed_in":["2.6-29.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"wpa_supplicant","fixed_in":["2.6-29.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"wpa_supplicant","fixed_in":["1:2.9-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"wpa_supplicant-debuginfo","fixed_in":["1:2.9-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"wpa_supplicant-debugsource","fixed_in":["1:2.9-5.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"wpa_supplicant","fixed_in":["1:2.9-5.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"wpa_supplicant","fixed_in":["2.9-4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"wpa_supplicant","fixed_in":["2.9-23.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"wpa_supplicant","fixed_in":["2.9-23.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"wpa","fixed_in":["2.1-0ubuntu1.7+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"wpa","fixed_in":["2.4-0ubuntu6.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"wpa","fixed_in":["2:2.6-15ubuntu2.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"wpa","fixed_in":["2:2.9-1ubuntu4.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"wpa_supplicant","fixed_in":["2.9-lp152.8.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r10"}]}]},{"source":"osv","ecosystem":"Android","package":"platform/external/wpa_supplicant_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2021-02-01"}]}],"versions":["8.0"]},{"source":"osv","ecosystem":"Android","package":"platform/external/wpa_supplicant_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-02-01"}]}],"versions":["8.1"]},{"source":"osv","ecosystem":"Android","package":"platform/external/wpa_supplicant_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-02-01"}]}],"versions":["9"]},{"source":"osv","ecosystem":"Android","package":"platform/external/wpa_supplicant_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-02-01"}]}],"versions":["10"]},{"source":"osv","ecosystem":"Android","package":"platform/external/wpa_supplicant_8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-02-01"}]}],"versions":["11"]},{"source":"osv","ecosystem":"Debian:12","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.9.0-17"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.9.0-17"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.9.0-17"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4-1+deb9u8"}]}],"versions":["2:2.4-1","2:2.4-1+deb9u1","2:2.4-1+deb9u2","2:2.4-1+deb9u3","2:2.4-1+deb9u4","2:2.4-1+deb9u6","2:2.4-1+deb9u7"]},{"source":"osv","ecosystem":"Debian:10","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.7+git20190128+0c1e29f-6+deb10u3"}]}],"versions":["2:2.7+git20190128+0c1e29f-6","2:2.7+git20190128+0c1e29f-6+deb10u1","2:2.7+git20190128+0c1e29f-6+deb10u2"],"bundled":3},{"source":"osv","ecosystem":"Mageia:7","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-1.3.mga7"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-29.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-29.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.9-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"wpa_supplicant-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.9-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"wpa_supplicant-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.9-5.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.9-5.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-23.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-23.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-15.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1-0ubuntu1.7+esm3"}]}],"versions":["1.0-3ubuntu2","1.0-3ubuntu3","1.0-3ubuntu4","2.1-0ubuntu1","2.1-0ubuntu1.1","2.1-0ubuntu1.2","2.1-0ubuntu1.3","2.1-0ubuntu1.4","2.1-0ubuntu1.5","2.1-0ubuntu1.6","2.1-0ubuntu1.7","2.1-0ubuntu1.7+esm1","2.1-0ubuntu1.7+esm2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-0ubuntu6.7"}]}],"versions":["2.4-0ubuntu3","2.4-0ubuntu4","2.4-0ubuntu5","2.4-0ubuntu6","2.4-0ubuntu6.2","2.4-0ubuntu6.3","2.4-0ubuntu6.4","2.4-0ubuntu6.5","2.4-0ubuntu6.6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.6-15ubuntu2.7"}]}],"versions":["2.4-0ubuntu10","2:2.4-1.1ubuntu1","2:2.6-15ubuntu1","2:2.6-15ubuntu2","2:2.6-15ubuntu2.1","2:2.6-15ubuntu2.2","2:2.6-15ubuntu2.3","2:2.6-15ubuntu2.4","2:2.6-15ubuntu2.5","2:2.6-15ubuntu2.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.9-1ubuntu4.2"}]}],"versions":["2:2.9-1ubuntu2","2:2.9-1ubuntu3","2:2.9-1ubuntu4","2:2.9-1ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-0ubuntu6.7"}]}],"versions":["2.4-0ubuntu3","2.4-0ubuntu4","2.4-0ubuntu5","2.4-0ubuntu6","2.4-0ubuntu6.2","2.4-0ubuntu6.3","2.4-0ubuntu6.4","2.4-0ubuntu6.5","2.4-0ubuntu6.6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.6-15ubuntu2.7"}]}],"versions":["2.4-0ubuntu10","2:2.4-1.1ubuntu1","2:2.6-15ubuntu1","2:2.6-15ubuntu2","2:2.6-15ubuntu2.1","2:2.6-15ubuntu2.2","2:2.6-15ubuntu2.3","2:2.6-15ubuntu2.4","2:2.6-15ubuntu2.5","2:2.6-15ubuntu2.6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.9-1ubuntu4.2"}]}],"versions":["2:2.9-1ubuntu2","2:2.9-1ubuntu3","2:2.9-1ubuntu4","2:2.9-1ubuntu4.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1-0ubuntu1.7+esm3"}]}],"versions":["1.0-3ubuntu2","1.0-3ubuntu3","1.0-3ubuntu4","2.1-0ubuntu1","2.1-0ubuntu1.1","2.1-0ubuntu1.2","2.1-0ubuntu1.3","2.1-0ubuntu1.4","2.1-0ubuntu1.5","2.1-0ubuntu1.6","2.1-0ubuntu1.7","2.1-0ubuntu1.7+esm1","2.1-0ubuntu1.7+esm2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-lp152.8.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-13.4"}]}],"bundled":16}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/2021-02-01","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMHPFCON6ZFCGZXSASJFKQ3UX2UIYMND/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/02/msg00033.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOSA6DZUDLVOCYJNNXD6V3MRBVLCXZFH/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.debian.org/security/2021/dsa-4898","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-0326","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VMHPFCON6ZFCGZXSASJFKQ3UX2UIYMND/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOSA6DZUDLVOCYJNNXD6V3MRBVLCXZFH/"},{"url":"https://github.com/advisories/GHSA-4wv8-p854-pjqv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-0326","tags":["advisory"]},{"url":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","tags":["fix"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-0326","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-0326","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0075.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28291","tags":["report"]},{"url":"https://w1.fi/security/2020-2/wpa_supplicant-p2p-group-info-processing-vulnerability.txt","tags":["web","article","report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1364","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1686","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1888050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1888718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1916394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925152","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1686.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-0326","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-0326","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2021:1686","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210443-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181777","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-0326","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210477-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210478-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1150934","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16275","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-0326","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2021/02/03/4","tags":["report"]},{"url":"https://w1.fi/security/2020-2/0001-P2P-Fix-copying-of-secondary-device-types-for-P2P-gr.patch","tags":["report"]},{"url":"https://w1.fi/cgit/hostap/commit/?id=947272febe24a8f0ea828b5b2f35f13c3821901e","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4734-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4734-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-12695","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YI2F4UP2SUM3KDNM2O5RK57I3NEYBJ26/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30004","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-0326","description":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525","status":"published","published":"2021-02-10T16:50:40Z","modified":"2024-08-03T15:39:59.563Z","updated_at":"2026-11-02T14:33:10.887946Z"}],"euvd":[{"id":"EUVD-2021-2945","description":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525","status":"published","published":"2021-02-10T16:50:40Z","modified":"2024-08-03T15:39:59Z","updated_at":"2026-11-03T03:25:17.997367Z"}],"ghsa":[{"id":"GHSA-4wv8-p854-pjqv","title":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds...","description":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525","status":"published","published":"2022-05-24T17:41:43Z","modified":"2023-01-29T05:05:19Z","cwes":["CWE-787"],"updated_at":"2026-11-02T14:45:45.932105Z"}],"nvd":[{"id":"CVE-2021-0326","description":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525","status":"published","published":"2021-02-10T17:15:19.177Z","modified":"2026-06-17T03:29:47.73Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.9,"vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:50.031227Z"}],"osv":[{"id":"ALPINE-CVE-2021-0326","description":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525","status":"published","published":"2021-02-10T17:15:19.177Z","modified":"2026-10-23T17:17:56.134060066Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"BELL-CVE-2021-0326","title":"CVE-2021-0326 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:37.807664Z","modified":"2026-01-26T09:49:05.450345Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2021-0326","description":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525","status":"published","published":"2021-02-10T17:15:19.177Z","modified":"2026-04-16T04:36:30.268411852Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2021-0326","description":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525","status":"published","published":"2021-02-10T17:15:19.177Z","modified":"2026-10-23T18:04:48.852661671Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"OESA-2021-1364","title":"wpa_supplicant security update","description":"wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.\r\n\r\nSecurity Fix(es):\r\n\r\nIn p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525(CVE-2021-0326)","status":"published","published":"2021-09-30T11:04:38Z","modified":"2026-08-18T01:16:01.668487755Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:1686","title":"Red Hat Security Advisory: wpa_supplicant security, bug fix, and enhancement update","status":"published","published":"2024-09-16T05:12:59Z","modified":"2025-11-22T12:20:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RLSA-2021:1686","title":"Moderate: wpa_supplicant security, bug fix, and enhancement update","description":"The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.\n\nSecurity Fix(es):\n\n* wpa_supplicant: P2P group information processing vulnerability (CVE-2021-0326)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.","status":"published","published":"2021-05-18T05:50:46Z","modified":"2026-02-05T15:00:06.950953Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-0326","description":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525","status":"published","published":"2021-02-10T00:00:00Z","modified":"2026-02-04T03:20:39.013126Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"ASB-A-172937525","description":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2021-02-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-10T17:35:04.393608Z"},{"id":"DLA-2572-1","title":"wpa - security update","status":"published","published":"2021-02-20T00:00:00Z","modified":"2026-03-09T01:23:05.205878Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4898-1","title":"wpa - security update","status":"published","published":"2021-04-22T00:00:00Z","modified":"2026-03-09T02:08:52.273024Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0075","title":"Updated wpa_supplicant packages fix a security vulnerability","description":"A vulnerability was discovered in how wpa_supplicant processing P2P\n(Wi-Fi Direct) group information from active group owners. The actual\nparsing of that information validates field lengths appropriately, but\nprocessing of the parsed information misses a length check when storing\na copy of the secondary device types. This can result in writing\nattacker controlled data into the peer entry after the area assigned for\nthe secondary device type. The overflow can result in corrupting\npointers for heap allocations. This can result in an attacker within\nradio range of the device running P2P discovery being able to cause\nunexpected behavior, including termination of the wpa_supplicant process\nand potentially arbitrary code execution.\n\nAn attacker (or a system controlled by the attacker) needs to be within\nradio range of the vulnerable system to send a suitably constructed\nmanagement frame that triggers a P2P peer device information to be\ncreated or updated. (CVE-2021-0326).\n","status":"published","published":"2021-02-08T17:58:05Z","modified":"2026-04-16T04:40:41.933925155Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0284-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2021-0326: P2P group information processing vulnerability (bsc#1181777).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-02-13T12:02:44Z","modified":"2026-02-04T03:38:43.033435Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:11515-1","title":"wpa_supplicant-2.9-13.4 on GA media","description":"These are all security issues fixed in the wpa_supplicant-2.9-13.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:01:24.837626Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2021:0443-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2021-0326: P2P group information processing vulnerability (bsc#1181777).\n","status":"published","published":"2021-02-11T15:37:03Z","modified":"2026-02-04T04:13:53.744058Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0477-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2021-0326: P2P group information processing vulnerability (bsc#1181777).\n","status":"published","published":"2021-02-15T09:47:47Z","modified":"2025-05-02T04:10:27.960439Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0478-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2021-0326: P2P group information processing vulnerability (bsc#1181777).\n- CVE-2019-16275: AP mode PMF disconnection protection bypass (bsc#1150934)\n","status":"published","published":"2021-02-15T09:50:04Z","modified":"2026-02-04T02:15:20.403312Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-4734-1","title":"wpa vulnerabilities","description":"It was discovered that wpa_supplicant did not properly handle P2P\n(Wi-Fi Direct) group information in some situations, leading to a\nheap overflow. A physically proximate attacker could use this to cause a\ndenial of service or possibly execute arbitrary code. (CVE-2021-0326)\n\nIt was discovered that hostapd did not properly handle UPnP subscribe\nmessages in some circumstances. An attacker could use this to cause a\ndenial of service. (CVE-2020-12695)\n","status":"published","published":"2021-02-11T22:22:17Z","modified":"2026-04-27T15:48:47.749406164Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-4734-2","title":"wpa vulnerabilities","description":"USN-4734-1 fixed several vulnerabilities in wpa_supplicant. This\nupdate provides the corresponding update for Ubuntu 14.04 ESM.\n\nIt was discovered that wpa_supplicant did not properly handle P2P\n(Wi-Fi Direct) group information in some situations, leading to a\nheap overflow. A physically proximate attacker could use this to cause a\ndenial of service or possibly execute arbitrary code. (CVE-2021-0326)\n\nIt was discovered that hostapd did not properly handle UPnP subscribe\nmessages in some circumstances. An attacker could use this to cause a\ndenial of service. (CVE-2020-12695)\n","status":"published","published":"2021-02-16T21:33:59Z","modified":"2026-04-27T16:03:35.073227376Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}