CVE Feed

    Dashboard / CVE / CVE-2019-2215

    CVE-2019-2215

    A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

    Published:Oct 11, 2019
    Last Modified:Oct 24, 2025
    EPS:Oct 11, 2019
    EPSS Score:0.46097
    CVSS Score:7.8

    CISA Notification

    Description

    A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    May 3, 2022
    1592 days ago
    Alert Date
    Nov 3, 2021
    1773 days ago

    Affected Products

    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Google
    Product
    Android
    Vendor
    Huawei
    Product
    Alp-al00b
    Vendor
    Huawei
    Product
    Alp-al00b Firmware
    Vendor
    Huawei
    Product
    Alp-tl00b
    Vendor
    Huawei
    Product
    Alp-tl00b Firmware
    Vendor
    Huawei
    Product
    Anne-al00
    Vendor
    Huawei
    Product
    Anne-al00 Firmware
    Vendor
    Huawei
    Product
    Ares-al00b
    Vendor
    Huawei
    Product
    Ares-al00b Firmware
    Vendor
    Huawei
    Product
    Ares-al10d
    Vendor
    Huawei
    Product
    Ares-al10d Firmware
    Vendor
    Huawei
    Product
    Ares-tl00chw
    Vendor
    Huawei
    Product
    Ares-tl00chw Firmware
    Vendor
    Huawei
    Product
    Barca-al00
    Vendor
    Huawei
    Product
    Barca-al00 Firmware
    Vendor
    Huawei
    Product
    Berkeley-l09
    Vendor
    Huawei
    Product
    Berkeley-l09 Firmware
    Vendor
    Huawei
    Product
    Berkeley-tl10
    Vendor
    Huawei
    Product
    Berkeley-tl10 Firmware
    Vendor
    Huawei
    Product
    Bla-al00b
    Vendor
    Huawei
    Product
    Bla-al00b Firmware
    Vendor
    Huawei
    Product
    Bla-l29c
    Vendor
    Huawei
    Product
    Bla-l29c Firmware
    Vendor
    Huawei
    Product
    Bla-tl00b
    Vendor
    Huawei
    Product
    Bla-tl00b Firmware
    Vendor
    Huawei
    Product
    Columbia-al00a
    Vendor
    Huawei
    Product
    Columbia-al00a Firmware
    Vendor
    Huawei
    Product
    Columbia-l29d
    Vendor
    Huawei
    Product
    Columbia-l29d Firmware
    Vendor
    Huawei
    Product
    Cornell-tl10b
    Vendor
    Huawei
    Product
    Cornell-tl10b Firmware
    Vendor
    Huawei
    Product
    Duke-l09i
    Vendor
    Huawei
    Product
    Duke-l09i Firmware
    Vendor
    Huawei
    Product
    Dura-al00a
    Vendor
    Huawei
    Product
    Dura-al00a Firmware
    Vendor
    Huawei
    Product
    Figo-al00a
    Vendor
    Huawei
    Product
    Figo-al00a Firmware
    Vendor
    Huawei
    Product
    Florida-al20b
    Vendor
    Huawei
    Product
    Florida-al20b Firmware
    Vendor
    Huawei
    Product
    Florida-l03
    Vendor
    Huawei
    Product
    Florida-l03 Firmware
    Vendor
    Huawei
    Product
    Florida-l21
    Vendor
    Huawei
    Product
    Florida-l21 Firmware
    Vendor
    Huawei
    Product
    Florida-l22
    Vendor
    Huawei
    Product
    Florida-l22 Firmware
    Vendor
    Huawei
    Product
    Florida-tl10b
    Vendor
    Huawei
    Product
    Florida-tl10b Firmware
    Vendor
    Huawei
    Product
    Honor 9i
    Vendor
    Huawei
    Product
    Honor 9i Firmware
    Vendor
    Huawei
    Product
    Honor View 20
    Vendor
    Huawei
    Product
    Honor View 20 Firmware
    Vendor
    Huawei
    Product
    Jakarta-al00a
    Vendor
    Huawei
    Product
    Jakarta-al00a Firmware
    Vendor
    Huawei
    Product
    Johnson-tl00d
    Vendor
    Huawei
    Product
    Johnson-tl00d Firmware
    Vendor
    Huawei
    Product
    Leland-al10b
    Vendor
    Huawei
    Product
    Leland-al10b Firmware
    Vendor
    Huawei
    Product
    Leland-l21a
    Vendor
    Huawei
    Product
    Leland-l21a Firmware
    Vendor
    Huawei
    Product
    Leland-l32a
    Vendor
    Huawei
    Product
    Leland-l32a Firmware
    Vendor
    Huawei
    Product
    Leland-tl10b
    Vendor
    Huawei
    Product
    Leland-tl10b Firmware
    Vendor
    Huawei
    Product
    Leland-tl10c
    Vendor
    Huawei
    Product
    Leland-tl10c Firmware
    Vendor
    Huawei
    Product
    Lelandp-al00c
    Vendor
    Huawei
    Product
    Lelandp-al00c Firmware
    Vendor
    Huawei
    Product
    Lelandp-l22c
    Vendor
    Huawei
    Product
    Lelandp-l22c Firmware
    Vendor
    Huawei
    Product
    Mate Rs
    Vendor
    Huawei
    Product
    Mate Rs Firmware
    Vendor
    Huawei
    Product
    Neo-al00d
    Vendor
    Huawei
    Product
    Neo-al00d Firmware
    Vendor
    Huawei
    Product
    Nova 2s
    Vendor
    Huawei
    Product
    Nova 2s Firmware
    Vendor
    Huawei
    Product
    Nova 3
    Vendor
    Huawei
    Product
    Nova 3 Firmware
    Vendor
    Huawei
    Product
    Nova 3e
    Vendor
    Huawei
    Product
    Nova 3e Firmware
    Vendor
    Huawei
    Product
    P20
    Vendor
    Huawei
    Product
    P20 Firmware
    Vendor
    Huawei
    Product
    P20 Lite
    Vendor
    Huawei
    Product
    P20 Lite Firmware
    Vendor
    Huawei
    Product
    Princeton-al10b
    Vendor
    Huawei
    Product
    Princeton-al10b Firmware
    Vendor
    Huawei
    Product
    Rhone-al00
    Vendor
    Huawei
    Product
    Rhone-al00 Firmware
    Vendor
    Huawei
    Product
    Stanford-l09
    Vendor
    Huawei
    Product
    Stanford-l09 Firmware
    Vendor
    Huawei
    Product
    Stanford-l09s
    Vendor
    Huawei
    Product
    Stanford-l09s Firmware
    Vendor
    Huawei
    Product
    Sydney-al00
    Vendor
    Huawei
    Product
    Sydney-al00 Firmware
    Vendor
    Huawei
    Product
    Sydney-tl00
    Vendor
    Huawei
    Product
    Sydney-tl00 Firmware
    Vendor
    Huawei
    Product
    Sydneym-al00
    Vendor
    Huawei
    Product
    Sydneym-al00 Firmware
    Vendor
    Huawei
    Product
    Tony-al00b
    Vendor
    Huawei
    Product
    Tony-al00b Firmware
    Vendor
    Huawei
    Product
    Tony-tl00b
    Vendor
    Huawei
    Product
    Tony-tl00b Firmware
    Vendor
    Huawei
    Product
    Y9 2019
    Vendor
    Huawei
    Product
    Y9 2019 Firmware
    Vendor
    Huawei
    Product
    Yale-al00a
    Vendor
    Huawei
    Product
    Yale-al00a Firmware
    Vendor
    Huawei
    Product
    Yale-l21a
    Vendor
    Huawei
    Product
    Yale-l21a Firmware
    Vendor
    Huawei
    Product
    Yale-tl00b
    Vendor
    Huawei
    Product
    Yale-tl00b Firmware
    Vendor
    Netapp
    Product
    A220
    Vendor
    Netapp
    Product
    A220 Firmware
    Vendor
    Netapp
    Product
    A320
    Vendor
    Netapp
    Product
    A320 Firmware
    Vendor
    Netapp
    Product
    A800
    Vendor
    Netapp
    Product
    A800 Firmware
    Vendor
    Netapp
    Product
    Aff Baseboard Management Controller
    Vendor
    Netapp
    Product
    Aff Baseboard Management Controller Firmware
    Vendor
    Netapp
    Product
    C190
    Vendor
    Netapp
    Product
    C190 Firmware
    Vendor
    Netapp
    Product
    Cloud Backup
    Vendor
    Netapp
    Product
    Data Availability Services
    Vendor
    Netapp
    Product
    Fas2720
    Vendor
    Netapp
    Product
    Fas2720 Firmware
    Vendor
    Netapp
    Product
    Fas2750
    Vendor
    Netapp
    Product
    Fas2750 Firmware
    Vendor
    Netapp
    Product
    H300s
    Vendor
    Netapp
    Product
    H300s Firmware
    Vendor
    Netapp
    Product
    H410c
    Vendor
    Netapp
    Product
    H410c Firmware
    Vendor
    Netapp
    Product
    H410s
    Vendor
    Netapp
    Product
    H410s Firmware
    Vendor
    Netapp
    Product
    H500s
    Vendor
    Netapp
    Product
    H500s Firmware
    Vendor
    Netapp
    Product
    H610s
    Vendor
    Netapp
    Product
    H610s Firmware
    Vendor
    Netapp
    Product
    H700s
    Vendor
    Netapp
    Product
    H700s Firmware
    Vendor
    Netapp
    Product
    Hci Management Node
    Vendor
    Netapp
    Product
    Service Processor
    Vendor
    Netapp
    Product
    Solidfire
    Vendor
    Netapp
    Product
    Solidfire Baseboard Management Controller
    Vendor
    Netapp
    Product
    Solidfire Baseboard Management Controller Firmware
    Vendor
    Netapp
    Product
    Steelstore Cloud Integrated Storage

    Exploits

    http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.htmlhttp://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.htmlhttp://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.htmlhttp://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.htmlhttps://www.exploit-db.com/exploits/47463https://github.com/0xbinder/android-kernel-exploitation-labhttps://github.com/0xbinder/CVE_2019_2215https://github.com/ATorNinja/CVE-2019-2215https://github.com/Begitdj/cve-2019-2215-markwhttps://github.com/Byte-Master-101/CVE-2019-2215https://github.com/c3r34lk1ll3r/CVE-2019-2215https://github.com/codecat007/CVE-2019-2215https://github.com/CrackerCat/Rootsmart-v2.0https://github.com/DimitriFourny/cve-2019-2215https://github.com/elbiazo/CVE-2019-2215https://github.com/enceka/cve-2019-2215-3.18https://github.com/Enceka/cve-2019-2215-3.18https://github.com/flipphoneguy/root-sonim-xp3800https://github.com/i-redbyte/android-badbinder-demohttps://github.com/kangtastic/cve-2019-2215https://github.com/LIznzn/CVE-2019-2215https://github.com/llccd/TempRoot-Huaweihttps://github.com/mouseos/cve-2019-2215_SH-M08https://github.com/mufidmb38/CVE-2019-2215https://github.com/mutur4/CVE-2019-2215https://github.com/mythicaltree/CVE-2019-2215https://github.com/NESTle19/CVE-2019-2215https://github.com/nicchongwb/Rootsmart-v2.0https://github.com/qre0ct/android-kernel-exploitation-ashfaq-CVE-2019-2215https://github.com/R0rt1z2/huawei-unlockhttps://github.com/raymontag/CVE-2019-2215https://github.com/raystyle/CVE-2019-2215https://github.com/sharif-dev/AndroidKernelVulnerabilityhttps://github.com/stevejubx/CVE-2019-2215https://github.com/timwr/CVE-2019-2215https://github.com/willboka/CVE-2019-2215-HuaweiP20Litehttps://github.com/wired0ut/CVE-2019-2215https://github.com/XiaozaYa/CVE-2019-2215https://www.exploit-db.com/exploits/48129

    Related CVEs

    CVE-2026-13476 (CVSS 7.3) — IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary co…
    CVE-2026-13367 (CVSS 7.8) — IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit s…
    CVE-2026-47337 (CVSS 3.3) — Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling …
    CVE-2026-47336 (CVSS 3.3) — Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/A…
    CVE-2026-47335 (CVSS 5.5) — Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor n…
    CVE-2026-47334 (CVSS 5.5) — Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock…
    CVE-2026-47333 (CVSS 7.8) — Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the si…
    CVE-2026-47332 (CVSS 5.5) — Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an intern…
    CVE-2026-47331 (CVSS 7.8) — Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. An…
    CVE-2026-47330 (CVSS 3.3) — Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an u…

    References

    http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html
    http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
    http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html
    http://seclists.org/fulldisclosure/2019/Oct/38
    http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en
    https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
    https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
    https://seclists.org/bugtraq/2019/Nov/11
    https://security.netapp.com/advisory/ntap-20191031-0005/
    https://source.android.com/security/bulletin/2019-10-01
    https://usn.ubuntu.com/4186-1/
    http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html
    http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
    http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html
    http://seclists.org/fulldisclosure/2019/Oct/38
    http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en
    https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
    https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
    https://seclists.org/bugtraq/2019/Nov/11
    https://security.netapp.com/advisory/ntap-20191031-0005/
    https://source.android.com/security/bulletin/2019-10-01
    https://usn.ubuntu.com/4186-1/
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-2215

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High