CVE-2016-6691
published 2016-10-10CVE-2016-6691: service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of…
PriorityP337critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
1.30%
67.6th percentile
service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of service (framework crash) or possibly have unspecified other impact via an access point that has a malformed SSID with GBK encoding, aka Qualcomm internal bug CR 978452.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | <= 7.0 | — | |
| android | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2016-6691: Android Security Bulletin 2016-10-01
CVE: CVE-2016-6691
Severity: HIGH
References: QC-CR#978452
vendor_android·2016-10-01·CVSS 9.8
CVE-2016-6691 [CRITICAL] CVE-2016-6691: Android Security Bulletin 2016-10-01
CVE: CVE-2016-6691
Severity: HIGH
References: QC-CR#978452
Android Security Bulletin 2016-10-01
CVE: CVE-2016-6691
Severity: HIGH
References: QC-CR#978452
GHSA
GHSA-2fmc-hw9p-wg9h: service/jni/com_android_server_wifi_Gbk2Utf
ghsa_unreviewed·2022-05-17
CVE-2016-6691 [CRITICAL] CWE-172 GHSA-2fmc-hw9p-wg9h: service/jni/com_android_server_wifi_Gbk2Utf
service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of service (framework crash) or possibly have unspecified other impact via an access point that has a malformed SSID with GBK encoding, aka Qualcomm internal bug CR 978452.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://source.android.com/security/bulletin/2016-10-01.htmlhttp://www.securityfocus.com/bid/93330https://source.codeaurora.org/quic/la//platform/frameworks/opt/net/wifi/commit/?id=343f123c396b2a97fc7cce396cd5d99365cb9131http://source.android.com/security/bulletin/2016-10-01.htmlhttp://www.securityfocus.com/bid/93330https://source.codeaurora.org/quic/la//platform/frameworks/opt/net/wifi/commit/?id=343f123c396b2a97fc7cce396cd5d99365cb9131
2016-10-10
Published