VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 10, 2021· Updated Aug 3, 2024

CVE-2021-0326

CVE-2021-0326

Description

An out-of-bounds write in Android's Wi-Fi Direct P2P component allows remote code execution on devices performing a Wi-Fi Direct search.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

An out-of-bounds write in Android's Wi-Fi Direct P2P component allows remote code execution on devices performing a Wi-Fi Direct search.

Vulnerability

In p2p.c, the function p2p_copy_client_info performs an out-of-bounds write due to a missing bounds check. This vulnerability affects Android versions 8.1, 9, 10, and 11. The code path is reachable during a Wi-Fi Direct search when the device communicates with a malicious peer.

Exploitation

An attacker can trigger this by sending a specially crafted Wi-Fi Direct message to a target device that is actively searching for Wi-Fi Direct peers. No user interaction or additional privileges are required. The attack is performed remotely over Wi-Fi.

Impact

Successful exploitation leads to remote code execution in the context of a privileged process, potentially allowing full device compromise. The severity is rated high.

Mitigation

Google released a fix in the Android Security Bulletin for February 2021 [1], with security patch level 2021-02-05. Users should update to this patch level or later. No workaround is available. The vulnerability is not listed on CISA's KEV at the time of writing.

References
  1. Android Security Bulletin—February 2021

AI Insight generated on May 27, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

34

Patches

0

No patches discovered yet.

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

5

News mentions

0

No linked articles in our index yet.