7.8
Élevée
Exploitée
CVE-2019-2215 Android Kernel Use-After-Free Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-416
Description
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Android | Versions non publiées |
Références
- source.android.com source.android.com
- 20191018 CVE 2019-2215 Android Binder Use After Free seclists.org
- packetstormsecurity.com packetstormsecurity.com
- www.huawei.com www.huawei.com
- security.netapp.com security.netapp.com
- 20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01) seclists.org
- packetstormsecurity.com packetstormsecurity.com
- USN-4186-1 usn.ubuntu.com
- [debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update lists.debian.org
- packetstormsecurity.com packetstormsecurity.com
- [debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update lists.debian.org
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Android
Les 2441 CVE de Android →
CVE-2023-21168
In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check
Non notée
CVE-2023-21167
In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a…
Non notée
CVE-2023-21169
In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check
Non notée
CVE-2023-21170
In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds…
Non notée