Back to CVE records
High 7.8Known exploited (CISA KEV)Published Oct 11, 2019
CVE-2019-2215A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel.
Updated under an hour ago ()
Does this affect you?
It affects google android and 59 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Nov 3, 2021; federal agencies had to remediate by May 3, 2022. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
- CVSS
- 7.8 HIGH (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-416
- Known exploited
- Added to CISA KEV Nov 3, 2021; federal remediation due May 3, 2022Apply updates per vendor instructions.
- EPSS (exploitation in the next 30 days)
- 72.10% (percentile 99)
- Assigned by
- google_android
- NVD analysis
- Analyzed
- Record last updated
- Oct 21, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
google android google:android | all versions | NVD |
debian debian_linux debian:debian_linux | 8.0 | NVD |
canonical ubuntu_linux canonical:ubuntu_linux | 16.04 | NVD |
netapp cloud_backup netapp:cloud_backup | all versions | NVD |
netapp data_availability_services netapp:data_availability_services | all versions | NVD |
netapp hci_management_node netapp:hci_management_node | all versions | NVD |
netapp service_processor netapp:service_processor | all versions | NVD |
netapp solidfire netapp:solidfire | all versions | NVD |
netapp steelstore_cloud_integrated_storage netapp:steelstore_cloud_integrated_storage | all versions | NVD |
netapp solidfire_baseboard_management_controller_firmware netapp:solidfire_baseboard_management_controller_firmware | all versions | NVD |
netapp aff_baseboard_management_controller_firmware netapp:aff_baseboard_management_controller_firmware | all versions | NVD |
netapp a320_firmware netapp:a320_firmware | all versions | NVD |
netapp c190_firmware netapp:c190_firmware | all versions | NVD |
netapp a220_firmware netapp:a220_firmware | all versions | NVD |
netapp fas2720_firmware netapp:fas2720_firmware | all versions | NVD |
netapp fas2750_firmware netapp:fas2750_firmware | all versions | NVD |
netapp a800_firmware netapp:a800_firmware | all versions | NVD |
netapp h300s_firmware netapp:h300s_firmware | all versions | NVD |
netapp h500s_firmware netapp:h500s_firmware | all versions | NVD |
netapp h700s_firmware netapp:h700s_firmware | all versions | NVD |
netapp h410s_firmware netapp:h410s_firmware | all versions | NVD |
netapp h410c_firmware netapp:h410c_firmware | all versions | NVD |
netapp h610s_firmware netapp:h610s_firmware | all versions | NVD |
huawei alp-al00b_firmware huawei:alp-al00b_firmware | before 10.0.0.162\(c00e156r2p4\) | NVD |
huawei alp-tl00b_firmware huawei:alp-tl00b_firmware | before 10.0.0.162\(c01e156r1p4\) | NVD |
huawei anne-al00_firmware huawei:anne-al00_firmware | before 9.1.0.126\(c00e126r1p7t8\) | NVD |
huawei ares-al00b_firmware huawei:ares-al00b_firmware | before 9.1.0.165\(c00e165r2p5t8\) | NVD |
huawei ares-al10d_firmware huawei:ares-al10d_firmware | before 9.1.0.165\(c00e165r2p5t8\) | NVD |
huawei ares-tl00chw_firmware huawei:ares-tl00chw_firmware | before 8.2.0.163\(c01r2p1\) | NVD |
huawei bla-al00b_firmware huawei:bla-al00b_firmware | before 10.0.0.170\(c786e170r2p4\) | NVD |
huawei bla-l29c_firmware huawei:bla-l29c_firmware | before 9.1.0.300\(c432e4r1p11t8\) | NVD |
huawei bla-tl00b_firmware huawei:bla-tl00b_firmware | before 10.0.0.170\(c01e170r1p4\) | NVD |
huawei barca-al00_firmware huawei:barca-al00_firmware | before 8.0.0.377\(c00\) | NVD |
huawei berkeley-l09_firmware huawei:berkeley-l09_firmware | before 9.1.0.351\(c432e5r1p13t8\) | NVD |
huawei berkeley-tl10_firmware huawei:berkeley-tl10_firmware | before 9.1.0.333\(c01e333r1p1t8\) | NVD |
huawei columbia-al00a_firmware huawei:columbia-al00a_firmware | before 8.1.0.186\(c00gt\) | NVD |
huawei columbia-l29d_firmware huawei:columbia-l29d_firmware | before 9.1.0.325\(c432e4r1p12t8\) | NVD |
huawei cornell-tl10b_firmware huawei:cornell-tl10b_firmware | before 9.1.0.321\(c01e320r1p1t8\) | NVD |
huawei duke-l09i_firmware huawei:duke-l09i_firmware | before 9.0.1.171\(c675e6r1p5t8\) | NVD |
huawei dura-al00a_firmware huawei:dura-al00a_firmware | before 1.0.0.190\(c00\) | NVD |
huawei figo-al00a_firmware huawei:figo-al00a_firmware | before 9.1.0.130\(c00e115r2p8t8\) | NVD |
huawei florida-al20b_firmware huawei:florida-al20b_firmware | before 9.1.0.128\(c00e112r1p6t8\) | NVD |
huawei florida-l03_firmware huawei:florida-l03_firmware | before 9.1.0.154\(c605e7r1p2t8\) | NVD |
huawei florida-l21_firmware huawei:florida-l21_firmware | before 9.1.0.154\(c605e7r1p2t8\) | NVD |
huawei florida-l22_firmware huawei:florida-l22_firmware | before 9.1.0.150\(c636e6r1p5t8\) | NVD |
huawei florida-tl10b_firmware huawei:florida-tl10b_firmware | before 9.1.0.128\(c01e112r1p6t8\) | NVD |
huawei mate_rs_firmware huawei:mate_rs_firmware | 9.1.0.321(c786e320r1p1t8) | NVD |
huawei p20_firmware huawei:p20_firmware | before 9.1.0.312\(c00e312r1p1t8\) | NVD |
huawei p20_lite_firmware huawei:p20_lite_firmware | before 9.1.0.200\(c605e4r1p3t8\); before 9.1.0.200\(c635e5r1p1t8\); before 9.1.0.246\(c432e6r1p7t8\); before 9.1.0.200\(c636e4r1p5t8\); before 9.1.0.201\(c636e4r1p5t8\); before 9.1.0.201\(zafc185e4r1p8t8\) | NVD |
huawei y9_2019_firmware huawei:y9_2019_firmware | before 9.1.0.297\(c605e4r1p1t8\) | NVD |
huawei nova_2s_firmware huawei:nova_2s_firmware | before 9.1.0.210\(c01e110r1p9t8\) | NVD |
huawei nova_3_firmware huawei:nova_3_firmware | before 9.1.0.351\(c00e351r1p1t8\) | NVD |
huawei nova_3e_firmware huawei:nova_3e_firmware | before 9.1.0.200\(c636e4r1p5t8\); before 9.1.0.201\(c636e4r1p5t8\); before 9.1.0.201\(zafc185e4r1p8t8\) | NVD |
huawei honor_view_20_firmware huawei:honor_view_20_firmware | before 10.1.0.214\(c10e5r4p3\) | NVD |
huawei jakarta-al00a_firmware huawei:jakarta-al00a_firmware | before 9.1.0.260\(c00e120r2p2\) | NVD |
huawei johnson-tl00d_firmware huawei:johnson-tl00d_firmware | before 9.1.0.219\(c01e18r3p2t8\) | NVD |
huawei leland-al10b_firmware huawei:leland-al10b_firmware | before 9.1.0.130\(c00e112r2p10t8\) | NVD |
huawei leland-l21a_firmware huawei:leland-l21a_firmware | before 9.1.0.156\(c185e5r1p5t8\) | NVD |
huawei leland-l32a_firmware huawei:leland-l32a_firmware | before 9.1.0.153\(c675e6r1p4t8\) | NVD |
huawei leland-tl10b_firmware huawei:leland-tl10b_firmware | before 9.1.0.130\(c01e112r2p10t8\) | NVD |
References
- https://source.android.com/security/bulletin/2019-10-01x-refsource-confirm, vendor-advisory
- http://seclists.org/fulldisclosure/2019/Oct/38mailing-list, x-refsource-fulldisc, third-party-advisory
- http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.htmlx-refsource-misc, exploit, third-party-advisory, vdb-entry
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-enx-refsource-confirm, third-party-advisory
- https://security.netapp.com/advisory/ntap-20191031-0005/x-refsource-confirm, third-party-advisory
- https://seclists.org/bugtraq/2019/Nov/11mailing-list, x-refsource-bugtraq, patch, third-party-advisory
- http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlx-refsource-misc, patch, third-party-advisory, vdb-entry
- https://usn.ubuntu.com/4186-1/vendor-advisory, x-refsource-ubuntu, third-party-advisory
- https://lists.debian.org/debian-lts-announce/2020/01/msg00013.htmlmailing-list, x-refsource-mlist, third-party-advisory
- http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.htmlx-refsource-misc, exploit, third-party-advisory, vdb-entry
- https://lists.debian.org/debian-lts-announce/2020/03/msg00001.htmlmailing-list, x-refsource-mlist, third-party-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-2215us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.