CVE-2019-2215

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

• CWE-416
• CWE-416

• http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlPatch, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Oct/38Mailing List, Third Party Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-enThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/01/msg00013.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/03/msg00001.htmlMailing List, Third Party Advisory
• https://seclists.org/bugtraq/2019/Nov/11Mailing List, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20191031-0005/Third Party Advisory
• https://source.android.com/security/bulletin/2019-10-01Vendor Advisory
• https://usn.ubuntu.com/4186-1/Third Party Advisory
• http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlPatch, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Oct/38Mailing List, Third Party Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-enThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/01/msg00013.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/03/msg00001.htmlMailing List, Third Party Advisory
• https://seclists.org/bugtraq/2019/Nov/11Mailing List, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20191031-0005/Third Party Advisory
• https://source.android.com/security/bulletin/2019-10-01Vendor Advisory
• https://usn.ubuntu.com/4186-1/Third Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-2215US Government Resource

Published

Oct 11, 2019

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-2209In BTA_DmPinReply of bta_dm_api.cc, there is a possible out …5.5
• CVE-2019-2210In load_logging_config of qmi_vs_service.cc, there is a poss…7.8
• CVE-2019-2211In createProjectionMapForQuery of TvProvider.java, there is …7.5
• CVE-2019-2212In poisson_distribution of random, there is an out of bounds…5.5
• CVE-2019-2213In binder_free_transaction of binder.c, there is a possible …7.4
• CVE-2019-2214In binder_transaction of binder.c, there is a possible out o…7.8
• CVE-2019-2216In overlay notifications, there is a possible hidden notific…7.3
• CVE-2019-2217In setCpuVulkanInUse of GpuStats.cpp, there is possible memo…7.8
• CVE-2019-2218In createSessionInternal of PackageInstallerService.java, th…7.8
• CVE-2019-2219In several functions of NotificationManagerService.java and …4.7
• CVE-2019-2220In checkOperation of AppOpsService.java, there is a possible…5.5
• CVE-2019-2221In hasActivityInVisibleTask of WindowProcessController.java …7.8