CVE-2019-2215

CVE-2019-2215 El siguiente problema existe en la rama android-msm-wahoo-4.4-pie de https://android.googlesource.com/kernel/msm y posiblemente en otras: Hay un use-after-free del miembro wait en la estructura binderthread del controlador binder en /drivers/android/binder.c. Como se describe en la...

CVE-2023-20938-poc

CVE-2023-20938 — Android binder UAF 权限提升 针对 CVE-2023-20938 的本地权限提升概念验证，这是一个 Android binder 驱动程序中的释放后使用漏洞。从无权限的 shell 中获得 uid 0 并将 SELinux 降级为 permissive ，然后生成一个 root shell。 目标构建环境：Android Cuttlefish / Goldfish AVD, x8664, 内核 5.10.107 。 ⚠️ 仅限授权研究/教育用途。 仅在您自己的测试设备和模拟器上运行。该错误已在当前 Android 中修复；此 PoC...

android-kernel-exploitation-lab

Android 内核利用实验室（Android Kernel Exploitation Lab） 本实验室将引导您搭建环境，以探索 CVE-2019-2215——Binder 子系统中一个关键的 Android 内核漏洞。 文档 环境搭建 使用 GDB 脚本实现内核提权 使用 syzkaller 进行模糊测试 使用 AFL++ 进行模糊测试 技术细节：CVE-2019-2215 该漏洞是 Android Binder 驱动中的一个释放后使用（use-after-free）漏洞，具有以下特征： 1. 根本原因 ：当 binder fd 被添加到一个 epoll...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100507)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100507 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderfreetransaction In binderfreetransaction, the t-toproc is read under the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100538 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderthreadrelease When a thread exits, binderthreadrelease walks its...

UBUNTU-CVE-2026-68458

In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it bindertransaction bounds the scatter-gather buffer area with sgbufendoffset and subtracts the aligned LSM context size because the secctx is written at the tail of that area. The...

EUVD-2021-27205

Malware in sbrugna...

EUVD-2017-4681

Malware in sbrugna...

EUVD-2024-30742

Malicious code in bioql PyPI...

CVE-2021-40015

There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability...

CVE-2024-32997

Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability...

Huawei EMUI/HarmonyOS Competitive Conditions Vulnerability

Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a mobile operating system based on Android, and Huawei HarmonyOS, a distributed operating system developed by Huawei for the whole scenario, aiming at realizing intelligent interconnection and resource sharing among people, devices, an...

CVE-2024-32997

Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability...

Huawei HarmonyOS 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a mobile operating system based on Android, and Huawei HarmonyOS, a distributed operating system developed by Huawei for the whole scenario, aiming at realizing intelligent interconnection and resource sharing among people, devices, an...

CVE-2024-32997

Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-32997

CVE-2024-32997 describes a race-condition vulnerability in Huawei HarmonyOS’s binder driver module. Affected components include HarmonyOS and Huawei EMUI environments relying on the Binder driver. Impact is listed as availability loss upon successful exploitation. Connected documents corroborate ...

CVE-2024-32997

Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability...

PT-2024-25044 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: A race condition vulnerability exists in the binder driver module. Successful exploitation of this issue will affect availability. Recommendations: At the moment, there is no information...

The vulnerability of the ` binder_enqueue_thread_work_ilocked()` function in the `drivers/android/binder.c` module of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the binderenqueuethreadworkilocked function in the drivers/android/binder.c module of the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2023-1005 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory corruption vulnerability due to a use after free in multiple functions of binder.c. This could lead to local escalation of privilege with no additional...