What’s Vulnerable › Vulnerabilities

CVE-2021-38111

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-08-04 · updated 2026-06-17
• Weakness: CWE-120

Description

The DEF CON 27 badge allows remote attackers to exploit a buffer overflow by sending an oversized packet via the NFMI (Near Field Magnetic Induction) protocol.

Affected products

• Defcon Def Con 27 Firmware: all versions

References

• https://defcon.org/html/defcon-29/dc-29-speakers.html#kintigh
• https://github.com/skintigh/defcon27_badge_sdr
• https://defcon.org/html/defcon-29/dc-29-speakers.html#kintigh
• https://github.com/skintigh/defcon27_badge_sdr

Get alerted when CVE-2021-38111 or the next vulnerability affects your stack