Out-of-Bounds Write Vulnerability in hostapd Wi-Fi 7 by Hostap
CVE-2026-58374
6.5MEDIUM
What is CVE-2026-58374?
An out-of-bounds write vulnerability has been identified in hostapd prior to version 2.12, specifically in the processing of Multi-Link Operation (MLO) association requests. This flaw arises from a missing bounds check, allowing an unauthenticated attacker within wireless range to send a crafted management frame. The vulnerability can lead to memory corruption and result in denial of service by terminating the hostapd process. This issue affects hostapd versions 2.11 and development snapshots built with CONFIG_IEEE80211BE enabled, and it has been addressed in version 2.12.
Affected Version(s)
hostapd 0 < 2.12