CVE-2019-2215

🗓️ 11 Oct 2019 18:16:48Reported by google_androidType

cve🔗 web.nvd.nist.gov📰️ 11 Media mentions👁 1406 Views

A use-after-free in binder.c allows an elevation of privilege in the Linux Kernel. No user interaction is required to exploit this vulnerability

Reporter	Title	Published	Views	Family All 122
Gitee	Exploit for Use After Free in Google Android	6 Sep 202504:17	–	gitee
Gitee	Exploit for Use After Free in Google Android	6 Jul 202503:25	–	gitee
Gitee	Exploit for Use After Free in Google Android	6 Sep 202512:07	–	gitee
0day.today	Android - Binder Driver Use-After-Free Exploit	4 Oct 201900:00	–	zdt
0day.today	Android Binder - Use-After-Free Exploit	24 Feb 202000:00	–	zdt
GithubExploit	Exploit for Use After Free in Google Android	12 Oct 201903:22	–	githubexploit
GithubExploit	Exploit for Use After Free in Google Android	7 May 202116:48	–	githubexploit
GithubExploit	Exploit for Use After Free in Google Android	10 Oct 201919:23	–	githubexploit
GithubExploit	Exploit for Use After Free in Google Android	5 Nov 202314:32	–	githubexploit
GithubExploit	Exploit for Use After Free in Google Android	17 Feb 202011:53	–	githubexploit

NVD

Node

google androidMatch-

Node

debian debian_linuxMatch8.0

Node

canonical ubuntu_linuxMatch16.04esm

Node

netapp cloud_backupMatch-

netapp data_availability_servicesMatch-

netapp hci_management_nodeMatch-

netapp service_processorMatch-

netapp solidfireMatch-

netapp steelstore_cloud_integrated_storageMatch-

Node

netapp solidfire_baseboard_management_controller_firmwareMatch-

AND

netapp solidfire_baseboard_management_controllerMatch-

Node

netapp aff_baseboard_management_controller_firmwareMatch-

AND

netapp aff_baseboard_management_controllerMatcha700s

Node

netapp a320_firmwareMatch-

AND

netapp a320Match-

Node

netapp c190_firmwareMatch-

AND

netapp c190Match-

Node

netapp a220_firmwareMatch-

AND

netapp a220Match-

Node

netapp fas2720_firmwareMatch-

AND

netapp fas2720Match-

Node

netapp fas2750_firmwareMatch-

AND

netapp fas2750Match-

Node

netapp a800_firmwareMatch-

AND

netapp a800Match-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

Node

netapp h610s_firmwareMatch-

AND

netapp h610sMatch-

Node

huawei alp-al00b_firmwareRange<10.0.0.162(c00e156r2p4)

AND

huawei alp-al00bMatch-

Node

huawei alp-tl00b_firmwareRange<10.0.0.162(c01e156r1p4)

AND

huawei alp-tl00bMatch-

Node

huawei anne-al00_firmwareRange<9.1.0.126(c00e126r1p7t8)

AND

huawei anne-al00Match-

Node

huawei ares-al00b_firmwareRange<9.1.0.165(c00e165r2p5t8)

AND

huawei ares-al00bMatch-

Node

huawei ares-al10d_firmwareRange<9.1.0.165(c00e165r2p5t8)

AND

huawei ares-al10dMatch-

Node

huawei ares-tl00chw_firmwareRange<8.2.0.163(c01r2p1)

AND

huawei ares-tl00chwMatch-

Node

huawei bla-al00b_firmwareRange<10.0.0.170(c786e170r2p4)

AND

huawei bla-al00bMatch-

Node

huawei bla-l29c_firmwareRange<9.1.0.300(c432e4r1p11t8)

AND

huawei bla-l29cMatch-

Node

huawei bla-tl00b_firmwareRange<10.0.0.170(c01e170r1p4)

AND

huawei bla-tl00bMatch-

Node

huawei barca-al00_firmwareRange<8.0.0.377(c00)

AND

huawei barca-al00Match-

Node

huawei berkeley-l09_firmwareRange<9.1.0.351(c432e5r1p13t8)

AND

huawei berkeley-l09Match-

Node

huawei berkeley-tl10_firmwareRange<9.1.0.333(c01e333r1p1t8)

AND

huawei berkeley-tl10Match-

Node

huawei columbia-al00a_firmwareRange<8.1.0.186(c00gt)

AND

huawei columbia-al00aMatch-

Node

huawei columbia-l29d_firmwareRange<9.1.0.325(c432e4r1p12t8)

AND

huawei columbia-l29dMatch-

Node

huawei cornell-tl10b_firmwareRange<9.1.0.321(c01e320r1p1t8)

AND

huawei cornell-tl10bMatch-

Node

huawei duke-l09i_firmwareRange<9.0.1.171(c675e6r1p5t8)

AND

huawei duke-l09iMatch-

Node

huawei dura-al00a_firmwareRange<1.0.0.190(c00)

AND

huawei dura-al00aMatch-

Node

huawei figo-al00a_firmwareRange<9.1.0.130(c00e115r2p8t8)

AND

huawei figo-al00aMatch-

Node

huawei florida-al20b_firmwareRange<9.1.0.128(c00e112r1p6t8)

AND

huawei florida-al20bMatch-

Node

huawei florida-l03_firmwareRange<9.1.0.154(c605e7r1p2t8)

AND

huawei florida-l03Match-

Node

huawei florida-l21_firmwareRange<9.1.0.154(c605e7r1p2t8)

AND

huawei florida-l21Match-

Node

huawei florida-l22_firmwareRange<9.1.0.150(c636e6r1p5t8)

AND

huawei florida-l22Match-

Node

huawei florida-tl10b_firmwareRange<9.1.0.128(c01e112r1p6t8)

AND

huawei florida-tl10bMatch-

Node

huawei mate_rs_firmwareMatch9.1.0.321(c786e320r1p1t8)

AND

huawei mate_rsMatch-

Node

huawei p20_firmwareRange<9.1.0.312(c00e312r1p1t8)

AND

huawei p20Match-

Node

huawei p20_lite_firmwareRange<9.1.0.200(c605e4r1p3t8)

AND

huawei p20_liteMatch-

Node

huawei p20_lite_firmwareRange<9.1.0.200(c635e5r1p1t8)

AND

huawei p20_liteMatch-

Node

huawei p20_lite_firmwareRange<9.1.0.246(c432e6r1p7t8)

AND

huawei p20_liteMatch-

Node

huawei y9_2019_firmwareRange<9.1.0.297(c605e4r1p1t8)

AND

huawei y9_2019Match-

Node

huawei nova_2s_firmwareRange<9.1.0.210(c01e110r1p9t8)

AND

huawei nova_2sMatch-

Node

huawei nova_3_firmwareRange<9.1.0.351(c00e351r1p1t8)

AND

huawei nova_3Match-

Node

huawei nova_3e_firmwareRange<9.1.0.200(c636e4r1p5t8)

AND

huawei nova_3eMatch-

Node

huawei p20_lite_firmwareRange<9.1.0.200(c636e4r1p5t8)

AND

huawei p20_liteMatch-

Node

huawei p20_lite_firmwareRange<9.1.0.201(c636e4r1p5t8)

AND

huawei p20_liteMatch-

Node

huawei nova_3e_firmwareRange<9.1.0.201(c636e4r1p5t8)

AND

huawei nova_3eMatch-

Node

huawei nova_3e_firmwareRange<9.1.0.201(zafc185e4r1p8t8)

AND

huawei nova_3eMatch-

Node

huawei p20_lite_firmwareRange<9.1.0.201(zafc185e4r1p8t8)

AND

huawei p20_liteMatch-

Node

huawei honor_view_20_firmwareRange<10.1.0.214(c10e5r4p3)

AND

huawei honor_view_20Match-

Node

huawei jakarta-al00a_firmwareRange<9.1.0.260(c00e120r2p2)

AND

huawei jakarta-al00aMatch-

Node

huawei johnson-tl00d_firmwareRange<9.1.0.219(c01e18r3p2t8)

AND

huawei johnson-tl00dMatch-

Node

huawei leland-al10b_firmwareRange<9.1.0.130(c00e112r2p10t8)

AND

huawei leland-al10bMatch-

Node

huawei leland-l21a_firmwareRange<9.1.0.156(c185e5r1p5t8)

AND

huawei leland-l21aMatch-

Node

huawei leland-l32a_firmwareRange<9.1.0.153(c675e6r1p4t8)

AND

huawei leland-l32aMatch-

Node

huawei leland-tl10b_firmwareRange<9.1.0.130(c01e112r2p10t8)

AND

huawei leland-tl10bMatch-

Node

huawei leland-tl10c_firmwareRange<9.1.0.130(c01e112r2p10t8)

AND

huawei leland-tl10cMatch-

Node

huawei lelandp-al00c_firmwareRange<9.1.0.130(c00e112r2p10t8)

AND

huawei lelandp-al00cMatch-

Node

huawei lelandp-l22c_firmwareRange<9.1.0.156(c636e5r1p5t8)

AND

huawei lelandp-l22cMatch-

Node

huawei neo-al00d_firmwareRange<9.1.0.321(c786e320r1p1t8)

AND

huawei neo-al00dMatch-

Node

huawei princeton-al10b_firmwareRange<10.1.0.160(c00e160r2p11)

AND

huawei princeton-al10bMatch-

Node

huawei rhone-al00_firmwareRange<8.0.0.376(c00)

AND

huawei rhone-al00Match-

Node

huawei stanford-l09_firmwareRange<9.1.0.211(c635e2r1p4t8)

AND

huawei stanford-l09Match-

Node

huawei stanford-l09s_firmwareRange<9.1.0.210(c432e2r1p5t8)

AND

huawei stanford-l09sMatch-

Node

huawei sydney-al00_firmwareRange<9.1.0.212(c00e62r1p7t8)

AND

huawei sydney-al00Match-

Node

huawei sydney-tl00_firmwareRange<9.1.0.212(c01e62r1p7t8)

AND

huawei sydney-tl00Match-

Node

huawei sydneym-al00_firmwareRange<9.1.0.212(c00e62r1p7t8)

AND

huawei sydneym-al00Match-

Node

huawei tony-al00b_firmwareRange<10.0.0.175(c00e59r2p11)

AND

huawei tony-al00bMatch-

Node

huawei tony-tl00b_firmwareRange<10.0.0.175(c01e59r2p11)

AND

huawei tony-tl00bMatch-

Node

huawei yale-al00a_firmwareRange<10.1.0.160(c00e160r8p12)

AND

huawei yale-al00aMatch-

Node

huawei yale-l21a_firmwareRange<10.1.0.231(c10e3r3p2)

AND

huawei yale-l21aMatch-

Node

huawei yale-tl00b_firmwareRange<10.1.0.160(c01e160r8p12)

AND

huawei yale-tl00bMatch-

Node

huawei honor_9i_firmwareRange<9.1.0.130(c00e112r2p10t8)

AND

huawei honor_9iMatch-

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Kernel"
      }
    ]
  }
]

Source	Link
source	www.source.android.com/security/bulletin/2019-10-01
packetstormsecurity	www.packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html
security	www.security.netapp.com/advisory/ntap-20191031-0005/
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en
seclists	www.seclists.org/fulldisclosure/2019/Oct/38
lists	www.lists.debian.org/debian-lts-announce/2020/03/msg00001.html
lists	www.lists.debian.org/debian-lts-announce/2020/01/msg00013.html
packetstormsecurity	www.packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html
seclists	www.seclists.org/bugtraq/2019/Nov/11
packetstormsecurity	www.packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

24 Oct 2025 14:11Current

7.5High risk

Vulners AI Score7.5

CVSS 24.6

CVSS 3.17.8

EPSS0.51467

SSVC