CVE-2021-28681 | BDVDB-2026-150649 Detail

Description#

Pion WebRTC before 3.0.15 didn't properly tear down the DTLS Connection when certificate verification failed. The PeerConnectionState was set to failed, but a user could ignore that and continue to use the PeerConnection. )A WebRTC implementation shouldn't allow the user to continue if verification has failed.)

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/pion/webrtc/issues/1708
https://github.com/pion/webrtc/security/advisories/GHSA-74xm-qj29-cq8p

Exploit#

No public exploit known

History#

Version 12021-03-18Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.