CVE-2021-27803: Debian Linux

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only
• Fedoraproject Fedora: version 32 only; version 33 only; version 34 only
• w1.fi Wpa Supplicant: from 1.0, before 2.10 (fixed in 2.10)

Published 2021-02-26. Last modified 2026-06-17.