ZeroDay Findings
Sign inSign up

Findings

CVE-2019-2215

Android Kernel Use-After-Free Vulnerability

Published Oct 11, 2019 · updated Jun 16, 2026 · google android

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

Timeline

Detection, updates, and resolution for this record.

  1. Oct 11, 2019 · Catalog

    Detected

    A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

  2. Nov 3, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 3, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

Required action

Apply updates per vendor instructions.

CISA due date May 3, 2022

Affected

  • cpe canonical/ubuntu linux16.04
  • cpe debian/debian linux8.0
  • cpe google/androidversion unspecified
  • cpe netapp/a320 firmwareversion unspecified
  • cpe netapp/aff baseboard management controller firmwareversion unspecified
  • cpe netapp/c190 firmwareversion unspecified
  • cpe netapp/cloud backupversion unspecified
  • cpe netapp/data availability servicesversion unspecified
  • cpe netapp/hci management nodeversion unspecified
  • cpe netapp/service processorversion unspecified
  • cpe netapp/solidfireversion unspecified
  • cpe netapp/solidfire baseboard management controller firmwareversion unspecified
  • vendor Android Android Kernelversion unspecified

Sources

  • CISA KEVCVE-2019-2215

    Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."

    cisa.gov
  • CVE.orgCVE-2019-2215

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2019-2215

    30-day exploitation probability 72.1%

    first.org
  • Exploit Database47463

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Exploit Database48129

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_android/local/binder_uaf

    Public module reference (excellent). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2019-2215

    A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerabi

    nvd.nist.gov

References