CVE-2015-4142: Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 thro...

Security readout for executives and security teams

This flaw can crash affected Wi-Fi access point software when it receives a specially crafted WMM Action frame. The main business impact is wireless service disruption, not data theft. Exposure is concentrated in systems using hostapd or wpa_supplicant for AP-mode MLME/SME functionality. Likely exposed assets are Linux or embedded wireless access points, test labs, appliances, or products using affected hostapd or wpa_supplicant versions in AP mode. Client-only wpa_supplicant use is not identified as affected in the provided source description. Treat as a service-availability risk for wireless infrastructure. It is not flagged as actively exploited in the provided sources, but affected AP-mode systems should be patched during normal security maintenance, sooner for sites relying on Wi-Fi for operations. Mitigation focus: Inventory hostapd and wpa_supplicant versions on AP-mode systems.; Apply operating system or vendor security updates referencing CVE-2015-4142.; Check upstream w1.fi guidance for fixed hostapd and wpa_supplicant releases..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.