CVE-2025-24912CWE-826

hostapd fails to process crafted RADIUS packets properly

Low · published March 12, 2025

CVSS v3.0
3.7
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.

The record
Technical detail
CVSS v3.0
3.7 · LOW
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00775 · 55.3th percentile
Weakness
CWE-826 · Premature Release of Resource During Expected Lifetime
Published
2025-03-12T04:43Z
EPSS history
Timeline
  • 12 MAR 04:43Z
    hostapd fails to process crafted RADIUS packets properly
    cvelistv5