VULNERABILITY INTELLIGENCE

CVE-2019-2215

CVSS score7.8 HIGH
EPSS probability72.10%
CISA KEVKnown exploited vulnerability
Published2019-10-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Android Kernel Use-After-Free Vulnerability

Vendor / product: Android / Android Kernel

Description

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

Weakness classification

  • CWE-416: Use After Free

Primary references