CVE-2016-6691

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-10-10 · updated 2026-06-17
Weakness: CWE-172

Description

service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of service (framework crash) or possibly have unspecified other impact via an access point that has a malformed SSID with GBK encoding, aka Qualcomm internal bug CR 978452.

Affected products

Android: through 7.0

References

http://source.android.com/security/bulletin/2016-10-01.html
http://www.securityfocus.com/bid/93330
https://source.codeaurora.org/quic/la//platform/frameworks/opt/net/wifi/commit/?id=343f123c396b2a97fc7cce396cd5d99365cb9131
http://source.android.com/security/bulletin/2016-10-01.html
http://www.securityfocus.com/bid/93330
https://source.codeaurora.org/quic/la//platform/frameworks/opt/net/wifi/commit/?id=343f123c396b2a97fc7cce396cd5d99365cb9131

Get alerted when CVE-2016-6691 or the next vulnerability affects your stack