CVE-2019-2215highunder attackCWE-416

CVE-2019-2215: high-severity vulnerability in Android

Published · Updated

Follow this CVE+ Monitor Android+ Monitor linux

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 7.8epss 72%
from disclosure to weaponsame day
Published on NVDOct 11
1st PoCOct 4
metasploitSep 26
CISA KEV+754d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Not affected
5 products (104 components) — because the vulnerable code is not present in the product
Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux 6 · Red Hat Enterprise MRG 2 · Red Hat Enterprise Linux 5
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

A flaw in Android's binder system allows an app to access memory that was already freed, potentially letting it take control of the kernel. An attacker would need to install a malicious app or exploit another vulnerability to trigger this.

Technical detail

Use-after-free vulnerability in binder.c enables privilege escalation from application context to kernel level via memory corruption. Exploitation requires local code execution (malicious app installation or network-facing app vulnerability) but no user interaction; impact includes full kernel compromise and device takeover.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · Android
public PoCs found — 77✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/48129exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/47463githubgithub.com/kangtastic/cve-2019-2215★ 138githubgithub.com/timwr/CVE-2019-2215★ 79githubgithub.com/sharif-dev/AndroidKernelVulnerability★ 73githubgithub.com/0xbinder/android-kernel-exploitation-lab★ 46githubgithub.com/DimitriFourny/cve-2019-2215★ 41githubgithub.com/LIznzn/CVE-2019-2215★ 26githubgithub.com/stevejubx/CVE-2019-2215★ 17githubgithub.com/c3r34lk1ll3r/CVE-2019-2215★ 14githubgithub.com/flipphoneguy/root-sonim-xp3800★ 12githubgithub.com/R0rt1z2/huawei-unlock★ 12githubgithub.com/llccd/TempRoot-Huawei★ 8githubgithub.com/qre0ct/android-kernel-exploitation-ashfaq-CVE-2019-2215★ 7githubgithub.com/mutur4/CVE-2019-2215★ 6githubgithub.com/willboka/CVE-2019-2215-HuaweiP20Lite★ 6githubgithub.com/i-redbyte/android-badbinder-demo★ 5githubgithub.com/0xbinder/CVE_2019_2215★ 5githubgithub.com/ATorNinja/CVE-2019-2215★ 4githubgithub.com/wired0ut/CVE-2019-2215★ 4githubgithub.com/mufidmb38/CVE-2019-2215★ 4githubgithub.com/Byte-Master-101/CVE-2019-2215★ 4githubgithub.com/Enceka/cve-2019-2215-3.18★ 3githubgithub.com/elbiazo/CVE-2019-2215★ 3githubgithub.com/saaedimam/sony-bravia-root-toolkit★ 2githubgithub.com/CrackerCat/Rootsmart-v2.0★ 2githubgithub.com/mouseos/cve-2019-2215_SH-M08★ 2githubgithub.com/Begitdj/cve-2019-2215-markw★ 1githubgithub.com/nicchongwb/Rootsmart-v2.0★ 1githubgithub.com/kilokite/old-phone-temp-root★ 0githubgithub.com/FDLAlfrid/odin-od105-devkit★ 0githubgithub.com/xushihushuo-art/cve-2019-2215-skyworth★ 0githubgithub.com/NESTle19/CVE-2019-2215★ 0githubgithub.com/codecat007/CVE-2019-2215★ 0githubgithub.com/raymontag/CVE-2019-2215★ 0githubgithub.com/XiaozaYa/CVE-2019-2215★ 0githubgithub.com/mythicaltree/CVE-2019-2215★ 0githubgithub.com/WJNKAC/cve-2019-2215-oppo-a77t★ 0vulncheckvulncheck.com/xdb/14fbecf8c339unverifiedcve_referencepacketstormsecurity.com/files/156495/Android-Binder-Use-After-Free.htmlunverifiedvulncheckvulncheck.com/xdb/48c20484fa71unverifiedvulncheckvulncheck.com/xdb/8a4303118997unverifiedvulncheckvulncheck.com/xdb/12342ff888a3unverifiedcve_referencepacketstormsecurity.com/files/154911/Android-Binder-Use-After-Free.htmlunverifiedvulncheckvulncheck.com/xdb/7c94a8838bcdunverifiedvulncheckvulncheck.com/xdb/35dcff39329cunverifiedvulncheckvulncheck.com/xdb/570fb66ac36funverifiedvulncheckvulncheck.com/xdb/2efb36bee06funverifiedvulncheckvulncheck.com/xdb/d23821631cf3unverifiedvulncheckvulncheck.com/xdb/36a09037d931unverifiedvulncheckvulncheck.com/xdb/174cd4ebaae4unverifiedvulncheckvulncheck.com/xdb/7a600a9b57a1unverifiedvulncheckvulncheck.com/xdb/958e996c14b3unverifiedvulncheckvulncheck.com/xdb/cafc1c4829ddunverifiedvulncheckvulncheck.com/xdb/f0574fcd7f48unverifiedvulncheckvulncheck.com/xdb/30246787d03dunverifiedvulncheckvulncheck.com/xdb/604294a627baunverifiedvulncheckvulncheck.com/xdb/b769e46ca29cunverifiedvulncheckvulncheck.com/xdb/c6234c8ce883unverifiedvulncheckvulncheck.com/xdb/af8a91dc7ae5unverifiedvulncheckvulncheck.com/xdb/bb9d6564de2bunverifiedvulncheckvulncheck.com/xdb/703d7ebd8c6aunverifiedcve_referencepacketstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlunverifiedvulncheckvulncheck.com/xdb/8042323a8edcunverifiedvulncheckvulncheck.com/xdb/5a63ca2255f9unverifiedvulncheckvulncheck.com/xdb/034793af86bcunverifiedvulncheckvulncheck.com/xdb/94306aabca16unverifiedvulncheckvulncheck.com/xdb/efc0233357b1unverifiedvulncheckvulncheck.com/xdb/40f7ae947346unverifiedvulncheckvulncheck.com/xdb/e0c374ee7c3funverifiedvulncheckvulncheck.com/xdb/3ad57705677funverifiedvulncheckvulncheck.com/xdb/7c2171bd00f8unverifiedvulncheckvulncheck.com/xdb/de8c2754f71aunverifiedvulncheckvulncheck.com/xdb/382de53322b0unverifiedvulncheckvulncheck.com/xdb/2830d77e0d86unverifiedvulncheckvulncheck.com/xdb/94793b346ad1unverifiedvulncheckvulncheck.com/xdb/77a8fc6659d0unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.