CVE-2016-6691

Critical

Published: 10/10/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The gbk2utf module in Qualcomm Wi-Fi in Android before 2016-10-05 allows remote attackers to cause a framework crash or possibly have unspecified other impact via an access point with a malformed SSID with GBK encoding.

Risk Assessment

Attackers can exploit this vulnerability to disrupt system operation, leading to service downtime. This may affect the availability of applications and services relying on Wi-Fi.

Recommendation

It is recommended to update Android to a version after 2016-10-05 to mitigate this vulnerability. Additionally, monitor and secure access points against malformed SSIDs.

Original NVD description (English source)

service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of service (framework crash) or possibly have unspecified other impact via an access point that has a malformed SSID with GBK encoding, aka Qualcomm internal bug CR 978452.