Use-After-Free Vulnerability in Android Binder Leading to Elevation of Privilege
CVE-2019-2215

7.8HIGH

Key Information:

Vendor: Google
Status: Android
Vendor: CVE Published:; 11 October 2019

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 51%🦅 CISA Reported

Summary

A use-after-free vulnerability exists in the Android Binder service, which could allow attackers to elevate privileges from an application to the Linux Kernel. Exploitation of this vulnerability does not require any interaction from the user; however, it necessitates either the installation of a malicious local application or the exploitation of another vulnerability within an application that is exposed to the network. This presents significant security risks, particularly as it could lead to unauthorized access and control over system resources.

CISA Reported

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: Apply updates per vendor instructions.

Affected Version(s)

Android Kernel

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

cve-2019-2215
Created by kangtastic