diff --git a/src/common/dpp.c b/src/common/dpp.c
index ab7072c..44cb910 100644
--- a/src/common/dpp.c
+++ b/src/common/dpp.c
@@ -5298,17 +5298,23 @@
 		wpa_printf(MSG_DEBUG, "DPP: mudurl = '%s'", token->string);
 
 	token = json_get_member(root, "bandSupport");
+	auth->band_list_size = 0;
 	if (token && token->type == JSON_ARRAY) {
+		memset(auth->band_list, 0, sizeof(auth->band_list));
 		wpa_printf(MSG_DEBUG, "DPP: bandSupport");
 		token = token->child;
 		while (token) {
-			if (token->type != JSON_NUMBER)
+			if (token->type != JSON_NUMBER) {
 				wpa_printf(MSG_DEBUG,
 					   "DPP: Invalid bandSupport array member type");
-			else
+			} else {
+				if (auth->band_list_size < DPP_MAX_CHANNELS) {
+					auth->band_list[auth->band_list_size++] = token->number;
+				}
 				wpa_printf(MSG_DEBUG,
 					   "DPP: Supported global operating class: %d",
 					   token->number);
+			}
 			token = token->sibling;
 		}
 	}
diff --git a/src/common/dpp.h b/src/common/dpp.h
index 0be26d7..abed3e4 100644
--- a/src/common/dpp.h
+++ b/src/common/dpp.h
@@ -185,6 +185,7 @@
 };
 
 #define DPP_MAX_CONF_OBJ 10
+#define DPP_MAX_CHANNELS 32
 
 struct dpp_authentication {
 	void *msg_ctx;
@@ -265,6 +266,8 @@
 	char *groups_override;
 	unsigned int ignore_netaccesskey_mismatch:1;
 #endif /* CONFIG_TESTING_OPTIONS */
+	unsigned short band_list[DPP_MAX_CHANNELS];
+	int band_list_size;
 };
 
 struct dpp_configurator {