CVE-2019-1999

2019-02-2817:00:00

google_android

www.cve.org

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

43.5%

JSON

In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-120025196.

CNA Affected

[
  {
    "product": "Android",
    "vendor": "Android",
    "versions": [
      {
        "status": "affected",
        "version": "Android kernel"
      }
    ]
  }
]