CVE-2019-2215
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - security@android.com
- Published
- 2019-10-11
- Last modified
- 2025-10-21
- Known exploited (CISA KEV)
- since 2021-11-03, action due 2022-05-03: Apply updates per vendor instructions.
- Weaknesses
- CWE-416
Affected products
- Ubuntu Linux (Canonical)
- Debian Linux (Debian)
- Android (Google)
- Alp-al00b Firmware (Huawei)
- Alp-tl00b Firmware (Huawei)
- Anne-al00 Firmware (Huawei)
- Ares-al00b Firmware (Huawei)
- Ares-al10d Firmware (Huawei)
- Ares-tl00chw Firmware (Huawei)
- Barca-al00 Firmware (Huawei)
- Berkeley-l09 Firmware (Huawei)
- Berkeley-tl10 Firmware (Huawei)
- Bla-al00b Firmware (Huawei)
- Bla-l29c Firmware (Huawei)
- Bla-tl00b Firmware (Huawei)
- Columbia-al00a Firmware (Huawei)
- Columbia-l29d Firmware (Huawei)
- Cornell-tl10b Firmware (Huawei)
- Duke-l09i Firmware (Huawei)
- Dura-al00a Firmware (Huawei)
- Figo-al00a Firmware (Huawei)
- Florida-al20b Firmware (Huawei)
- Florida-l03 Firmware (Huawei)
- Florida-l21 Firmware (Huawei)
- Florida-l22 Firmware (Huawei)
- Florida-tl10b Firmware (Huawei)
- Honor 9i Firmware (Huawei)
- Honor View 20 Firmware (Huawei)
- Jakarta-al00a Firmware (Huawei)
- Johnson-tl00d Firmware (Huawei)
- Leland-al10b Firmware (Huawei)
- Leland-l21a Firmware (Huawei)
- Leland-l32a Firmware (Huawei)
- Leland-tl10b Firmware (Huawei)
- Leland-tl10c Firmware (Huawei)
- Lelandp-al00c Firmware (Huawei)
- Lelandp-l22c Firmware (Huawei)
- Mate Rs Firmware (Huawei)
- Neo-al00d Firmware (Huawei)
- Nova 2s Firmware (Huawei)
- Nova 3 Firmware (Huawei)
- Nova 3e Firmware (Huawei)
- P20 Firmware (Huawei)
- P20 Lite Firmware (Huawei)
- Princeton-al10b Firmware (Huawei)
- Rhone-al00 Firmware (Huawei)
- Stanford-l09 Firmware (Huawei)
- Stanford-l09s Firmware (Huawei)
- Sydney-al00 Firmware (Huawei)
- Sydney-tl00 Firmware (Huawei)
- Sydneym-al00 Firmware (Huawei)
- Tony-al00b Firmware (Huawei)
- Tony-tl00b Firmware (Huawei)
- Y9 2019 Firmware (Huawei)
- Yale-al00a Firmware (Huawei)
- Yale-l21a Firmware (Huawei)
- Yale-tl00b Firmware (Huawei)
- A220 Firmware (Netapp)
- A320 Firmware (Netapp)
- A800 Firmware (Netapp)
- Aff Baseboard Management Controller Firmware (Netapp)
- C190 Firmware (Netapp)
- Cloud Backup (Netapp)
- Data Availability Services (Netapp)
- Fas2720 Firmware (Netapp)
- Fas2750 Firmware (Netapp)
- H300s Firmware (Netapp)
- H410c Firmware (Netapp)
- H410s Firmware (Netapp)
- H500s Firmware (Netapp)
- H610s Firmware (Netapp)
- H700s Firmware (Netapp)
- Hci Management Node (Netapp)
- Service Processor (Netapp)
- Solidfire (Netapp)
- Solidfire Baseboard Management Controller Firmware (Netapp)
- Steelstore Cloud Integrated Storage (Netapp)
References
- http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html
- http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
- http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html
- http://seclists.org/fulldisclosure/2019/Oct/38
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en
- https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
- https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
- https://seclists.org/bugtraq/2019/Nov/11
- https://security.netapp.com/advisory/ntap-20191031-0005/
- https://source.android.com/security/bulletin/2019-10-01
- https://usn.ubuntu.com/4186-1/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-2215
