Android · Android Kernel
CVE-2019-2215
Android Kernel Use-After-Free Vulnerability
What it is
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
CISA: Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: May 3, 2022
- Added to the CISA list
- November 3, 2021
- Published
- October 11, 2019
- Severity
- High 7.8 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 72% in the top 0.6% of all known vulnerabilities
- Weakness
- CWE-416
- More details
- NVD · CVE.org · CISA
All references (11)
- https://usn.ubuntu.com/4186-1/
- https://source.android.com/security/bulletin/2019-10-01
- http://seclists.org/fulldisclosure/2019/Oct/38
- http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en
- https://security.netapp.com/advisory/ntap-20191031-0005/
- https://seclists.org/bugtraq/2019/Nov/11
- http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
- https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
- http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html
- https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
More exploited flaws from Android
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Nov 3, 2021 | Kernel Out-of-Bounds Write | Android Kernel | High 7.8 | 3.2% |
| Jun 2, 2026 | Integer Overflow | Framework | High 8.4 | 1.9% |
| Dec 2, 2025 | Privilege Escalation | Framework | High 7.8 | 0.3% |
| Dec 2, 2025 | Information Disclosure | Framework | Medium 5.5 | 0.3% |
| Sep 4, 2025 | Use-After-Free | Runtime | High 8.8 | 0.6% |
| Nov 7, 2024 | Privilege Escalation | Framework | High 7.3 | 0.7% |
| Aug 7, 2024 | Remote Code Execution | Kernel | High 7.8 | 2.7% |
| Jun 13, 2024 | Privilege Escalation | Pixel | High 8.1 | 3.0% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.