Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-2215

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

Published

2019-10-11T19:15:10.947

Last Modified

2025-10-24T14:11:31.703

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

3.9

Impact Score

6.4

Weaknesses

Type: Primary
CWE-416
Type: Secondary
CWE-416

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	google	android	-	Yes
Operating System	debian	debian_linux	8.0	Yes
Operating System	canonical	ubuntu_linux	16.04	Yes
Application	netapp	cloud_backup	-	Yes
Application	netapp	data_availability_services	-	Yes
Application	netapp	hci_management_node	-	Yes
Application	netapp	service_processor	-	Yes
Application	netapp	solidfire	-	Yes
Application	netapp	steelstore_cloud_integrated_storage	-	Yes
Operating System	netapp	solidfire_baseboard_management_controller_firmware	-	Yes
Hardware	netapp	solidfire_baseboard_management_controller	-	No
Operating System	netapp	aff_baseboard_management_controller_firmware	-	Yes
Hardware	netapp	aff_baseboard_management_controller	a700s	No
Operating System	netapp	a320_firmware	-	Yes
Hardware	netapp	a320	-	No
Operating System	netapp	c190_firmware	-	Yes
Hardware	netapp	c190	-	No
Operating System	netapp	a220_firmware	-	Yes
Hardware	netapp	a220	-	No
Operating System	netapp	fas2720_firmware	-	Yes
Hardware	netapp	fas2720	-	No
Operating System	netapp	fas2750_firmware	-	Yes
Hardware	netapp	fas2750	-	No
Operating System	netapp	a800_firmware	-	Yes
Hardware	netapp	a800	-	No
Operating System	netapp	h300s_firmware	-	Yes
Hardware	netapp	h300s	-	No
Operating System	netapp	h500s_firmware	-	Yes
Hardware	netapp	h500s	-	No
Operating System	netapp	h700s_firmware	-	Yes
Hardware	netapp	h700s	-	No
Operating System	netapp	h410s_firmware	-	Yes
Hardware	netapp	h410s	-	No
Operating System	netapp	h410c_firmware	-	Yes
Hardware	netapp	h410c	-	No
Operating System	netapp	h610s_firmware	-	Yes
Hardware	netapp	h610s	-	No
Operating System	huawei	alp-al00b_firmware	< 10.0.0.162\(c00e156r2p4\)	Yes
Hardware	huawei	alp-al00b	-	No
Operating System	huawei	alp-tl00b_firmware	< 10.0.0.162\(c01e156r1p4\)	Yes
Hardware	huawei	alp-tl00b	-	No
Operating System	huawei	anne-al00_firmware	< 9.1.0.126\(c00e126r1p7t8\)	Yes
Hardware	huawei	anne-al00	-	No
Operating System	huawei	ares-al00b_firmware	< 9.1.0.165\(c00e165r2p5t8\)	Yes
Hardware	huawei	ares-al00b	-	No
Operating System	huawei	ares-al10d_firmware	< 9.1.0.165\(c00e165r2p5t8\)	Yes
Hardware	huawei	ares-al10d	-	No
Operating System	huawei	ares-tl00chw_firmware	< 8.2.0.163\(c01r2p1\)	Yes
Hardware	huawei	ares-tl00chw	-	No
Operating System	huawei	bla-al00b_firmware	< 10.0.0.170\(c786e170r2p4\)	Yes
Hardware	huawei	bla-al00b	-	No
Operating System	huawei	bla-l29c_firmware	< 9.1.0.300\(c432e4r1p11t8\)	Yes
Hardware	huawei	bla-l29c	-	No
Operating System	huawei	bla-tl00b_firmware	< 10.0.0.170\(c01e170r1p4\)	Yes
Hardware	huawei	bla-tl00b	-	No
Operating System	huawei	barca-al00_firmware	< 8.0.0.377\(c00\)	Yes
Hardware	huawei	barca-al00	-	No
Operating System	huawei	berkeley-l09_firmware	< 9.1.0.351\(c432e5r1p13t8\)	Yes
Hardware	huawei	berkeley-l09	-	No
Operating System	huawei	berkeley-tl10_firmware	< 9.1.0.333\(c01e333r1p1t8\)	Yes
Hardware	huawei	berkeley-tl10	-	No
Operating System	huawei	columbia-al00a_firmware	< 8.1.0.186\(c00gt\)	Yes
Hardware	huawei	columbia-al00a	-	No
Operating System	huawei	columbia-l29d_firmware	< 9.1.0.325\(c432e4r1p12t8\)	Yes
Hardware	huawei	columbia-l29d	-	No
Operating System	huawei	cornell-tl10b_firmware	< 9.1.0.321\(c01e320r1p1t8\)	Yes
Hardware	huawei	cornell-tl10b	-	No
Operating System	huawei	duke-l09i_firmware	< 9.0.1.171\(c675e6r1p5t8\)	Yes
Hardware	huawei	duke-l09i	-	No
Operating System	huawei	dura-al00a_firmware	< 1.0.0.190\(c00\)	Yes
Hardware	huawei	dura-al00a	-	No
Operating System	huawei	figo-al00a_firmware	< 9.1.0.130\(c00e115r2p8t8\)	Yes
Hardware	huawei	figo-al00a	-	No
Operating System	huawei	florida-al20b_firmware	< 9.1.0.128\(c00e112r1p6t8\)	Yes
Hardware	huawei	florida-al20b	-	No
Operating System	huawei	florida-l03_firmware	< 9.1.0.154\(c605e7r1p2t8\)	Yes
Hardware	huawei	florida-l03	-	No
Operating System	huawei	florida-l21_firmware	< 9.1.0.154\(c605e7r1p2t8\)	Yes
Hardware	huawei	florida-l21	-	No
Operating System	huawei	florida-l22_firmware	< 9.1.0.150\(c636e6r1p5t8\)	Yes
Hardware	huawei	florida-l22	-	No
Operating System	huawei	florida-tl10b_firmware	< 9.1.0.128\(c01e112r1p6t8\)	Yes
Hardware	huawei	florida-tl10b	-	No
Operating System	huawei	mate_rs_firmware	9.1.0.321\(c786e320r1p1t8\)	Yes
Hardware	huawei	mate_rs	-	No
Operating System	huawei	p20_firmware	< 9.1.0.312\(c00e312r1p1t8\)	Yes
Hardware	huawei	p20	-	No
Operating System	huawei	p20_lite_firmware	< 9.1.0.200\(c605e4r1p3t8\)	Yes
Hardware	huawei	p20_lite	-	No
Operating System	huawei	p20_lite_firmware	< 9.1.0.200\(c635e5r1p1t8\)	Yes
Hardware	huawei	p20_lite	-	No
Operating System	huawei	p20_lite_firmware	< 9.1.0.246\(c432e6r1p7t8\)	Yes
Hardware	huawei	p20_lite	-	No
Operating System	huawei	y9_2019_firmware	< 9.1.0.297\(c605e4r1p1t8\)	Yes
Hardware	huawei	y9_2019	-	No
Operating System	huawei	nova_2s_firmware	< 9.1.0.210\(c01e110r1p9t8\)	Yes
Hardware	huawei	nova_2s	-	No
Operating System	huawei	nova_3_firmware	< 9.1.0.351\(c00e351r1p1t8\)	Yes
Hardware	huawei	nova_3	-	No
Operating System	huawei	nova_3e_firmware	< 9.1.0.200\(c636e4r1p5t8\)	Yes
Hardware	huawei	nova_3e	-	No
Operating System	huawei	p20_lite_firmware	< 9.1.0.200\(c636e4r1p5t8\)	Yes
Hardware	huawei	p20_lite	-	No
Operating System	huawei	p20_lite_firmware	< 9.1.0.201\(c636e4r1p5t8\)	Yes
Hardware	huawei	p20_lite	-	No
Operating System	huawei	nova_3e_firmware	< 9.1.0.201\(c636e4r1p5t8\)	Yes
Hardware	huawei	nova_3e	-	No
Operating System	huawei	nova_3e_firmware	< 9.1.0.201\(zafc185e4r1p8t8\)	Yes
Hardware	huawei	nova_3e	-	No
Operating System	huawei	p20_lite_firmware	< 9.1.0.201\(zafc185e4r1p8t8\)	Yes
Hardware	huawei	p20_lite	-	No
Operating System	huawei	honor_view_20_firmware	< 10.1.0.214\(c10e5r4p3\)	Yes
Hardware	huawei	honor_view_20	-	No
Operating System	huawei	jakarta-al00a_firmware	< 9.1.0.260\(c00e120r2p2\)	Yes
Hardware	huawei	jakarta-al00a	-	No
Operating System	huawei	johnson-tl00d_firmware	< 9.1.0.219\(c01e18r3p2t8\)	Yes
Hardware	huawei	johnson-tl00d	-	No
Operating System	huawei	leland-al10b_firmware	< 9.1.0.130\(c00e112r2p10t8\)	Yes
Hardware	huawei	leland-al10b	-	No
Operating System	huawei	leland-l21a_firmware	< 9.1.0.156\(c185e5r1p5t8\)	Yes
Hardware	huawei	leland-l21a	-	No
Operating System	huawei	leland-l32a_firmware	< 9.1.0.153\(c675e6r1p4t8\)	Yes
Hardware	huawei	leland-l32a	-	No
Operating System	huawei	leland-tl10b_firmware	< 9.1.0.130\(c01e112r2p10t8\)	Yes
Hardware	huawei	leland-tl10b	-	No
Operating System	huawei	leland-tl10c_firmware	< 9.1.0.130\(c01e112r2p10t8\)	Yes
Hardware	huawei	leland-tl10c	-	No
Operating System	huawei	lelandp-al00c_firmware	< 9.1.0.130\(c00e112r2p10t8\)	Yes
Hardware	huawei	lelandp-al00c	-	No
Operating System	huawei	lelandp-l22c_firmware	< 9.1.0.156\(c636e5r1p5t8\)	Yes
Hardware	huawei	lelandp-l22c	-	No
Operating System	huawei	neo-al00d_firmware	< 9.1.0.321\(c786e320r1p1t8\)	Yes
Hardware	huawei	neo-al00d	-	No
Operating System	huawei	princeton-al10b_firmware	< 10.1.0.160\(c00e160r2p11\)	Yes
Hardware	huawei	princeton-al10b	-	No
Operating System	huawei	rhone-al00_firmware	< 8.0.0.376\(c00\)	Yes
Hardware	huawei	rhone-al00	-	No
Operating System	huawei	stanford-l09_firmware	< 9.1.0.211\(c635e2r1p4t8\)	Yes
Hardware	huawei	stanford-l09	-	No
Operating System	huawei	stanford-l09s_firmware	< 9.1.0.210\(c432e2r1p5t8\)	Yes
Hardware	huawei	stanford-l09s	-	No
Operating System	huawei	sydney-al00_firmware	< 9.1.0.212\(c00e62r1p7t8\)	Yes
Hardware	huawei	sydney-al00	-	No
Operating System	huawei	sydney-tl00_firmware	< 9.1.0.212\(c01e62r1p7t8\)	Yes
Hardware	huawei	sydney-tl00	-	No
Operating System	huawei	sydneym-al00_firmware	< 9.1.0.212\(c00e62r1p7t8\)	Yes
Hardware	huawei	sydneym-al00	-	No
Operating System	huawei	tony-al00b_firmware	< 10.0.0.175\(c00e59r2p11\)	Yes
Hardware	huawei	tony-al00b	-	No
Operating System	huawei	tony-tl00b_firmware	< 10.0.0.175\(c01e59r2p11\)	Yes
Hardware	huawei	tony-tl00b	-	No
Operating System	huawei	yale-al00a_firmware	< 10.1.0.160\(c00e160r8p12\)	Yes
Hardware	huawei	yale-al00a	-	No
Operating System	huawei	yale-l21a_firmware	< 10.1.0.231\(c10e3r3p2\)	Yes
Hardware	huawei	yale-l21a	-	No
Operating System	huawei	yale-tl00b_firmware	< 10.1.0.160\(c01e160r8p12\)	Yes
Hardware	huawei	yale-tl00b	-	No
Operating System	huawei	honor_9i_firmware	< 9.1.0.130\(c00e112r2p10t8\)	Yes
Hardware	huawei	honor_9i	-	No

References

http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html Exploit, Third Party Advisory, VDB Entry ([email protected])
http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html Patch, Third Party Advisory, VDB Entry ([email protected])
http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html Exploit, Third Party Advisory, VDB Entry ([email protected])
http://seclists.org/fulldisclosure/2019/Oct/38 Mailing List, Third Party Advisory ([email protected])
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en Third Party Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html Mailing List, Third Party Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html Mailing List, Third Party Advisory ([email protected])
https://seclists.org/bugtraq/2019/Nov/11 Mailing List, Patch, Third Party Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20191031-0005/ Third Party Advisory ([email protected])
https://source.android.com/security/bulletin/2019-10-01 Vendor Advisory ([email protected])
https://usn.ubuntu.com/4186-1/ Third Party Advisory ([email protected])
http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html Patch, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2019/Oct/38 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://seclists.org/bugtraq/2019/Nov/11 Mailing List, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20191031-0005/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://source.android.com/security/bulletin/2019-10-01 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/4186-1/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-2215 US Government Resource (134c704f-9b21-4f2e-91b3-4a467353bcc0)