CVE-2016-6691: Google Android

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of service (framework crash) or possibly have unspecified other impact via an access point that has a malformed SSID with GBK encoding, aka Qualcomm internal bug CR 978452.

Affected products

• Google Android: up to and including 7.0

Published 2016-10-10. Last modified 2026-06-17.