{"id":"CVE-2019-2215","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-2215","generatedAt":"2026-10-31T18:40:33.280Z","title":"Android Kernel Use-After-Free Vulnerability","description":"A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","published":"2019-10-11T19:15:11.000Z","lastModified":"2026-06-17T02:33:27.000Z","status":"Analyzed","sourceIdentifier":"security@android.com","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-416"],"affected":["google/android","debian/debian linux","canonical/ubuntu linux","netapp/cloud backup","netapp/data availability services","netapp/hci management node","netapp/service processor","netapp/solidfire","netapp/steelstore cloud integrated storage","netapp/solidfire baseboard management controller firmware","netapp/aff baseboard management controller firmware","netapp/a320 firmware","netapp/c190 firmware","netapp/a220 firmware","netapp/fas2720 firmware","netapp/fas2750 firmware","netapp/a800 firmware","netapp/h300s firmware","netapp/h500s firmware","netapp/h700s firmware","netapp/h410s firmware","netapp/h410c firmware","netapp/h610s firmware","huawei/alp-al00b firmware","huawei/alp-tl00b firmware","huawei/anne-al00 firmware","huawei/ares-al00b firmware","huawei/ares-al10d firmware","huawei/ares-tl00chw firmware","huawei/bla-al00b firmware","huawei/bla-l29c firmware","huawei/bla-tl00b firmware","huawei/barca-al00 firmware","huawei/berkeley-l09 firmware","huawei/berkeley-tl10 firmware","huawei/columbia-al00a firmware","huawei/columbia-l29d firmware","huawei/cornell-tl10b firmware","huawei/duke-l09i firmware","huawei/dura-al00a firmware","huawei/figo-al00a firmware","huawei/florida-al20b firmware","huawei/florida-l03 firmware","huawei/florida-l21 firmware","huawei/florida-l22 firmware","huawei/florida-tl10b firmware","huawei/mate rs firmware","huawei/p20 firmware","huawei/p20 lite firmware","huawei/y9 2019 firmware","huawei/nova 2s firmware","huawei/nova 3 firmware","huawei/nova 3e firmware","huawei/honor view 20 firmware","huawei/jakarta-al00a firmware","huawei/johnson-tl00d firmware","huawei/leland-al10b firmware","huawei/leland-l21a firmware","huawei/leland-l32a firmware","huawei/leland-tl10b firmware"],"epss":{"score":0.72105,"percentile":0.99431,"date":"2026-10-30","history":[]},"kev":{"listed":true,"dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","notes":"Apply updates per vendor instructions.\nhttps://nvd.nist.gov/vuln/detail/CVE-2019-2215"},"exploits":{"count":2,"verified":true,"firstPublished":"2019-10-04","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":48129,"kind":"exploit","title":"Android Binder - Use-After-Free (Metasploit)","url":"https://www.exploit-db.com/exploits/48129","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/android/local/48129.rb","file":"exploits/android/local/48129.rb","published":"2020-02-24","added":"2020-02-24","updated":"2020-02-24","author":"Metasploit","type":"local","platform":"android","port":null,"verified":true,"codes":["CVE-2019-2215"],"tags":"Local","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/android/local/binder_uaf.rb"},{"edbId":47463,"kind":"exploit","title":"Android - Binder Driver Use-After-Free","url":"https://www.exploit-db.com/exploits/47463","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/android/local/47463.txt","file":"exploits/android/local/47463.txt","published":"2019-10-04","added":"2019-10-04","updated":"2019-10-04","author":"Google Security Research","type":"local","platform":"android","port":null,"verified":true,"codes":["CVE-2019-2215"],"tags":"Use After Free (UAF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1942"}]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 3 May 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"security@android.com"},{"url":"http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html","tags":["Patch","Third Party Advisory","VDB Entry"],"source":"security@android.com"},{"url":"http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"security@android.com"},{"url":"http://seclists.org/fulldisclosure/2019/Oct/38","tags":["Mailing List","Third Party Advisory"],"source":"security@android.com"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en","tags":["Third Party Advisory"],"source":"security@android.com"},{"url":"https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html","tags":["Mailing List","Third Party Advisory"],"source":"security@android.com"},{"url":"https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html","tags":["Mailing List","Third Party Advisory"],"source":"security@android.com"},{"url":"https://seclists.org/bugtraq/2019/Nov/11","tags":["Mailing List","Patch","Third Party Advisory"],"source":"security@android.com"},{"url":"https://security.netapp.com/advisory/ntap-20191031-0005/","tags":["Third Party Advisory"],"source":"security@android.com"},{"url":"https://source.android.com/security/bulletin/2019-10-01","tags":["Vendor Advisory"],"source":"security@android.com"},{"url":"https://usn.ubuntu.com/4186-1/","tags":["Third Party Advisory"],"source":"security@android.com"},{"url":"http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html","tags":["Patch","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2019/Oct/38","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/Nov/11","tags":["Mailing List","Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20191031-0005/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.android.com/security/bulletin/2019-10-01","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4186-1/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-2215","tags":["US Government Resource"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-2215","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}