CVE-2021-28681: WebRTC Project WebRTC

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Pion WebRTC before 3.0.15 didn't properly tear down the DTLS Connection when certificate verification failed. The PeerConnectionState was set to failed, but a user could ignore that and continue to use the PeerConnection. )A WebRTC implementation shouldn't allow the user to continue if verification has failed.)

Affected products

• WebRTC Project WebRTC: before 3.0.15 (fixed in 3.0.15)

Published 2021-03-18. Last modified 2026-06-17.