CVE-2021-30004

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.

An attacker could forge certificates or authentication data, potentially compromising network communication integrity and enabling man-in-the-middle attacks.

Immediately update wpa_supplicant and hostapd to a patched version (e.g., 2.10 or later).