CVE-2021-39306: Realtek RTL8195AM Firmware

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an attacker sends a big size Authentication challenge text in WEP security.

Affected products

• Realtek RTL8195AM Firmware: before 2.0.10 (fixed in 2.0.10)

Published 2021-12-22. Last modified 2026-06-17.