CVE-2025-24912 LOW

CVE-2025-24912

Vendor Jouni Malinen

Product hostapd

Weakness CWE-826

Published March 12, 2025

Last update March 12, 2025

View on NVD All CVEs

CVSS base score

3.7/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.

Key dates

02Disclosure timeline

March 12, 2025 CVE published

March 12, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-24912 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/826.html

Related vulnerabilities

CVE-2025-24912

01Description

02Disclosure timeline

03References

04Related CVE