diff --git a/core/hdd/src/wlan_hdd_wext.c b/core/hdd/src/wlan_hdd_wext.c index ec8b0ed427b0..2a67e2fa60e2 100644 --- a/core/hdd/src/wlan_hdd_wext.c +++ b/core/hdd/src/wlan_hdd_wext.c @@ -4001,7 +4001,7 @@ uint8_t *wlan_hdd_get_vendor_oui_ie_ptr(uint8_t *oui, uint8_t oui_size, eid, elem_len, left); return NULL; } - if (elem_id == eid) { + if ((elem_id == eid) && (elem_len >= oui_size)) { if (memcmp(&ptr[2], oui, oui_size) == 0) return ptr; }