To add to this, for someone to do anything, they'd have to physically be in range of the network you're on. They CAN sniff data going to and from your device and the router. They CAN inject malware as you're trying to access legit websites. But, there isn't really a ton of Android malware out there to be worried about and the chances of someone having this exploit, being in range of your network, and knowing you have an Android device, and having malware to shoehorn in to your legit connection are pretty low.
Additionally, they can sniff for packets and collect data, but if the sites you're visiting are using https (most are these days), the data remains encrypted and unreadable.
Further, I know I was looking through the list in the link that @me just sayin posted in post #7. Netgear, specifically, as that's the brand of router I use at home. According to the Netgear site, this only affects routers and etc that are running in bridge mode, which none of their devices do out-of-the-box. You'd have to set it up to run in bridge mode for specific use cases. Again, if you're only using sites that are https instead of http, the data remains encrypted and unreadable.
While this is a rather disheartening exploit, it's not as earth-shattering as it has originally been made out to be.
Make sure your routers and devices have the latest available patches, use https as much as possible, and you should be fine.
