CVE-2019-2215

UNKNOWN

Published 2019-10-11T18:16:48.000Z

Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2019-2215. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.1

7.8

/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score Metrics

Exploitability: N/A Impact: N/A

EPSS Score

v2025.03.14

0.439

probability

of exploitation in the wild

There is a 43.9% chance that this vulnerability will be exploited in the wild within the next 30 days.

Updated: 2025-06-25

Exploit Probability

Percentile: 0.974

Higher than 97.4% of all CVEs

Attack Vector Metrics

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Impact Metrics

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Description

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Known Exploited Vulnerability

This vulnerability is actively being exploited in the wild

View KEV Details

Remediation Status

Overdue

Due Date

May 3, 2022

Added to KEV

November 3, 2021

Required Action

Apply updates per vendor instructions.

Affected Product

Vendor/Project: Android

Product: Android Kernel

Ransomware Risk

Known Ransomware Use

KEV Catalog Version: 2025.01.24 Released: January 24, 2025

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-m7g6-9cwp-6jgm

Advisory Details

CVSS Scoring

CVSS Score

7.5

CVSS Vector


                                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2019-2215

WEB https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html

WEB https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html

WEB https://seclists.org/bugtraq/2019/Nov/11

WEB https://security.netapp.com/advisory/ntap-20191031-0005

WEB https://source.android.com/security/bulletin/2019-10-01

WEB https://usn.ubuntu.com/4186-1

WEB http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html

WEB http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

WEB http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html

WEB http://seclists.org/fulldisclosure/2019/Oct/38

WEB http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en

Advisory provided by GitHub Security Advisory Database. Published: May 24, 2022, Modified: April 4, 2024

Social Media Intelligence

Real-time discussions and threat intelligence from social platforms

1 post

Reddit • 2 weeks ago

KindSeaworthiness411

Exploit

Rooting Kyocera E4610 (aka DuraXV LTE) [Verizon's 1.805VZ firmware], Android 7.1.1, Kernel 3.10.49 Folks, I need a second brain and/or some support in this adventure. Android was never my domain, but I have some software qualification, and a bit of reverse engineering abilities. First of all, none of "classic" root-packs …

Also mentions: CVE-2016-5195

15.0

View Original High Risk