CVE-2019-2215

CVE-2019-2215 is a use-after-free in the Android binder driver (binder.c) that enables local privilege escalation from an app to the Linux kernel. The issue is local, with no user interaction required, and exploitation may lead to memory corruption, denial of service, or escalation per the cited ...

CVE-2019-19412

CVE-2019-19412 details a Factory Reset Protection (FRP) bypass on Huawei smartphones. An attacker using TalkBack mode can bypass FRP and install third-party apps by reconfiguring the device. Huawei’s security advisory HWPSIRT-2018-09212 and the linked Huawei PSIRT page note affected models and th...