diff --git a/libwifi/modules/broadcom/wlctrl.c b/libwifi/modules/broadcom/wlctrl.c
index f7b056437afabdc45f7b1521d7b2a628810b8035..555329538436db37cb93b3a2535779895e4ad9f5 100644
--- a/libwifi/modules/broadcom/wlctrl.c
+++ b/libwifi/modules/broadcom/wlctrl.c
@@ -2131,7 +2131,7 @@ int bcmwl_iface_ap_info(const char *name, struct wifi_ap *ap)
 	if (ie_ptr) {
 		ap->bss.caps.valid |= WIFI_CAP_HE_VALID;
 		memcpy(&ap->bss.caps.he, &ie_ptr[3], min(ie_ptr[1], sizeof(struct wifi_caps_he)));
-		wifi_cap_set_from_ie(ap->bss.cbitmap, ie_ptr, ie_ptr[1] + 3);
+		wifi_cap_set_from_ie(ap->bss.cbitmap, ie_ptr, ie_ptr[1] + 2);
 	}
 
 	/* WMM stats */
diff --git a/libwifi/wifiutils.c b/libwifi/wifiutils.c
index 33cd48cf1984db7ab732fa0ebc88648f59c66577..6033e8f27945e2085ce0b0093e008331a84f353f 100644
--- a/libwifi/wifiutils.c
+++ b/libwifi/wifiutils.c
@@ -545,10 +545,7 @@ void wifi_cap_set_from_ie(uint8_t *bitmap, uint8_t *ie, size_t len)
 		return;
 	}
 
-	if (ie[0] != IE_EXT && ie[1] != len - 2)
-		return;   /* bad request */
-
-	if (ie[0] == IE_EXT && ie[1] != len - 3)
+	if (ie[1] != len - 2)
 		return;   /* bad request */
 
 	eid = ie[0];