CVE-2019-2215

Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.

Analyzing data...

Overview

Original source data

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

Affected products and scope

Analyzing data...

Technical details

Analyzing data...

Exploitability

Analyzing data...

Technical impact

Analyzing data...

Business impact

Analyzing data...

Remediation

Analyzing data...

Detection

Analyzing data...
Sources (19)
GCVE / Vulnerability-Lookup
CVE Program
google_android (CNA)
NVD
FIRST EPSS
CISA Known Exploited Vulnerabilities
known-exploited-vulnerabilities-catalog
Red Hat CSAF VEX
source.android.com
seclists.org
11
packetstormsecurity.com
Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlAndroid-Binder-Use-After-Free.html
huawei.com
security.netapp.com
usn.ubuntu.com
lists.debian.org
msg00001.html
Learn more

Run an in-depth assessment with complete web risk management

CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.

Explore CyStack VulnScan

Explore other related solutions

Android

google

--
View details
View all security vulnerabilities