--- a/sys/netproto/802_11/wlan/ieee80211_input.c
+++ b/sys/netproto/802_11/wlan/ieee80211_input.c
@@ -586 parse_beacon TIM case
 	case IEEE80211_ELEMID_TIM:
 		/* XXX ATIM? */
+		if (frm[1] < 2)		/* DF-3341: count+period must be present */
+			break;
 		scan->tim = frm;
 		scan->timoff = frm - mtod(m, uint8_t *);