{"cve_id":"CVE-2019-2215","published":"2019-10-11T19:15:10.947000+00:00","last_modified":"2026-06-17T02:33:27.307000+00:00","vuln_status":"Analyzed","description":"A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","base_score":7.8,"base_severity":"HIGH","attack_vector":"LOCAL","privileges_req":"LOW","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-416"],"in_kev":true,"kev_date_added":"2021-11-03","kev_ransomware":false,"epss_score":0.72105,"epss_percentile":0.99432,"cap_rule_version":"0.1.1","stage":"EXECUTION","req_access":"USER","req_vector":"LOCAL","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T09:04:57.321803+00:00","first_seen":"2019-10-11T19:15:10.947000+00:00","kev_first_seen":"2021-11-03T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["canonical","debian","google","huawei","netapp"],"products":["a220","a220_firmware","a320","a320_firmware","a800","a800_firmware","aff_baseboard_management_controller","aff_baseboard_management_controller_firmware","alp-al00b","alp-al00b_firmware","alp-tl00b","alp-tl00b_firmware","android","anne-al00","anne-al00_firmware","ares-al00b","ares-al00b_firmware","ares-al10d","ares-al10d_firmware","ares-tl00chw","ares-tl00chw_firmware","barca-al00","barca-al00_firmware","berkeley-l09","berkeley-l09_firmware","berkeley-tl10","berkeley-tl10_firmware","bla-al00b","bla-al00b_firmware","bla-l29c","bla-l29c_firmware","bla-tl00b","bla-tl00b_firmware","c190","c190_firmware","cloud_backup","columbia-al00a","columbia-al00a_firmware","columbia-l29d","columbia-l29d_firmware","cornell-tl10b","cornell-tl10b_firmware","data_availability_services","debian_linux","duke-l09i","duke-l09i_firmware","dura-al00a","dura-al00a_firmware","fas2720","fas2720_firmware","fas2750","fas2750_firmware","figo-al00a","figo-al00a_firmware","florida-al20b","florida-al20b_firmware","florida-l03","florida-l03_firmware","florida-l21","florida-l21_firmware","florida-l22","florida-l22_firmware","florida-tl10b","florida-tl10b_firmware","h300s","h300s_firmware","h410c","h410c_firmware","h410s","h410s_firmware","h500s","h500s_firmware","h610s","h610s_firmware","h700s","h700s_firmware","hci_management_node","honor_9i","honor_9i_firmware","honor_view_20","honor_view_20_firmware","jakarta-al00a","jakarta-al00a_firmware","johnson-tl00d","johnson-tl00d_firmware","leland-al10b","leland-al10b_firmware","leland-l21a","leland-l21a_firmware","leland-l32a","leland-l32a_firmware","leland-tl10b","leland-tl10b_firmware","leland-tl10c","leland-tl10c_firmware","lelandp-al00c","lelandp-al00c_firmware","lelandp-l22c","lelandp-l22c_firmware","mate_rs","mate_rs_firmware","neo-al00d","neo-al00d_firmware","nova_2s","nova_2s_firmware","nova_3","nova_3_firmware","nova_3e","nova_3e_firmware","p20","p20_firmware","p20_lite","p20_lite_firmware","princeton-al10b","princeton-al10b_firmware","rhone-al00","rhone-al00_firmware","service_processor","solidfire","solidfire_baseboard_management_controller","solidfire_baseboard_management_controller_firmware","stanford-l09","stanford-l09_firmware","stanford-l09s","stanford-l09s_firmware","steelstore_cloud_integrated_storage","sydney-al00","sydney-al00_firmware","sydney-tl00","sydney-tl00_firmware","sydneym-al00","sydneym-al00_firmware","tony-al00b","tony-al00b_firmware","tony-tl00b","tony-tl00b_firmware","ubuntu_linux","y9_2019","y9_2019_firmware","yale-al00a","yale-al00a_firmware","yale-l21a","yale-l21a_firmware","yale-tl00b","yale-tl00b_firmware"],"affected":[{"vendor":"canonical","product":"ubuntu_linux","ranges":["16.04"]},{"vendor":"debian","product":"debian_linux","ranges":["8.0"]},{"vendor":"google","product":"android","ranges":["all versions"]},{"vendor":"huawei","product":"alp-al00b_firmware","ranges":["< 10.0.0.162\\(c00e156r2p4\\)"]},{"vendor":"huawei","product":"alp-tl00b_firmware","ranges":["< 10.0.0.162\\(c01e156r1p4\\)"]},{"vendor":"huawei","product":"anne-al00_firmware","ranges":["< 9.1.0.126\\(c00e126r1p7t8\\)"]},{"vendor":"huawei","product":"ares-al00b_firmware","ranges":["< 9.1.0.165\\(c00e165r2p5t8\\)"]},{"vendor":"huawei","product":"ares-al10d_firmware","ranges":["< 9.1.0.165\\(c00e165r2p5t8\\)"]},{"vendor":"huawei","product":"ares-tl00chw_firmware","ranges":["< 8.2.0.163\\(c01r2p1\\)"]},{"vendor":"huawei","product":"barca-al00_firmware","ranges":["< 8.0.0.377\\(c00\\)"]},{"vendor":"huawei","product":"berkeley-l09_firmware","ranges":["< 9.1.0.351\\(c432e5r1p13t8\\)"]},{"vendor":"huawei","product":"berkeley-tl10_firmware","ranges":["< 9.1.0.333\\(c01e333r1p1t8\\)"]},{"vendor":"huawei","product":"bla-al00b_firmware","ranges":["< 10.0.0.170\\(c786e170r2p4\\)"]},{"vendor":"huawei","product":"bla-l29c_firmware","ranges":["< 9.1.0.300\\(c432e4r1p11t8\\)"]},{"vendor":"huawei","product":"bla-tl00b_firmware","ranges":["< 10.0.0.170\\(c01e170r1p4\\)"]},{"vendor":"huawei","product":"columbia-al00a_firmware","ranges":["< 8.1.0.186\\(c00gt\\)"]},{"vendor":"huawei","product":"columbia-l29d_firmware","ranges":["< 9.1.0.325\\(c432e4r1p12t8\\)"]},{"vendor":"huawei","product":"cornell-tl10b_firmware","ranges":["< 9.1.0.321\\(c01e320r1p1t8\\)"]},{"vendor":"huawei","product":"duke-l09i_firmware","ranges":["< 9.0.1.171\\(c675e6r1p5t8\\)"]},{"vendor":"huawei","product":"dura-al00a_firmware","ranges":["< 1.0.0.190\\(c00\\)"]},{"vendor":"huawei","product":"figo-al00a_firmware","ranges":["< 9.1.0.130\\(c00e115r2p8t8\\)"]},{"vendor":"huawei","product":"florida-al20b_firmware","ranges":["< 9.1.0.128\\(c00e112r1p6t8\\)"]},{"vendor":"huawei","product":"florida-l03_firmware","ranges":["< 9.1.0.154\\(c605e7r1p2t8\\)"]},{"vendor":"huawei","product":"florida-l21_firmware","ranges":["< 9.1.0.154\\(c605e7r1p2t8\\)"]},{"vendor":"huawei","product":"florida-l22_firmware","ranges":["< 9.1.0.150\\(c636e6r1p5t8\\)"]},{"vendor":"huawei","product":"florida-tl10b_firmware","ranges":["< 9.1.0.128\\(c01e112r1p6t8\\)"]},{"vendor":"huawei","product":"honor_9i_firmware","ranges":["< 9.1.0.130\\(c00e112r2p10t8\\)"]},{"vendor":"huawei","product":"honor_view_20_firmware","ranges":["< 10.1.0.214\\(c10e5r4p3\\)"]},{"vendor":"huawei","product":"jakarta-al00a_firmware","ranges":["< 9.1.0.260\\(c00e120r2p2\\)"]},{"vendor":"huawei","product":"johnson-tl00d_firmware","ranges":["< 9.1.0.219\\(c01e18r3p2t8\\)"]},{"vendor":"huawei","product":"leland-al10b_firmware","ranges":["< 9.1.0.130\\(c00e112r2p10t8\\)"]},{"vendor":"huawei","product":"leland-l21a_firmware","ranges":["< 9.1.0.156\\(c185e5r1p5t8\\)"]},{"vendor":"huawei","product":"leland-l32a_firmware","ranges":["< 9.1.0.153\\(c675e6r1p4t8\\)"]},{"vendor":"huawei","product":"leland-tl10b_firmware","ranges":["< 9.1.0.130\\(c01e112r2p10t8\\)"]},{"vendor":"huawei","product":"leland-tl10c_firmware","ranges":["< 9.1.0.130\\(c01e112r2p10t8\\)"]},{"vendor":"huawei","product":"lelandp-al00c_firmware","ranges":["< 9.1.0.130\\(c00e112r2p10t8\\)"]},{"vendor":"huawei","product":"lelandp-l22c_firmware","ranges":["< 9.1.0.156\\(c636e5r1p5t8\\)"]},{"vendor":"huawei","product":"mate_rs_firmware","ranges":["9.1.0.321\\(c786e320r1p1t8\\)"]},{"vendor":"huawei","product":"neo-al00d_firmware","ranges":["< 9.1.0.321\\(c786e320r1p1t8\\)"]},{"vendor":"huawei","product":"nova_2s_firmware","ranges":["< 9.1.0.210\\(c01e110r1p9t8\\)"]},{"vendor":"huawei","product":"nova_3_firmware","ranges":["< 9.1.0.351\\(c00e351r1p1t8\\)"]},{"vendor":"huawei","product":"nova_3e_firmware","ranges":["< 9.1.0.201\\(c636e4r1p5t8\\)","< 9.1.0.200\\(c636e4r1p5t8\\)","< 9.1.0.201\\(zafc185e4r1p8t8\\)"]},{"vendor":"huawei","product":"p20_firmware","ranges":["< 9.1.0.312\\(c00e312r1p1t8\\)"]},{"vendor":"huawei","product":"p20_lite_firmware","ranges":["< 9.1.0.200\\(c605e4r1p3t8\\)","< 9.1.0.200\\(c635e5r1p1t8\\)","< 9.1.0.246\\(c432e6r1p7t8\\)","< 9.1.0.201\\(zafc185e4r1p8t8\\)","< 9.1.0.201\\(c636e4r1p5t8\\)","< 9.1.0.200\\(c636e4r1p5t8\\)"]},{"vendor":"huawei","product":"princeton-al10b_firmware","ranges":["< 10.1.0.160\\(c00e160r2p11\\)"]},{"vendor":"huawei","product":"rhone-al00_firmware","ranges":["< 8.0.0.376\\(c00\\)"]},{"vendor":"huawei","product":"stanford-l09_firmware","ranges":["< 9.1.0.211\\(c635e2r1p4t8\\)"]},{"vendor":"huawei","product":"stanford-l09s_firmware","ranges":["< 9.1.0.210\\(c432e2r1p5t8\\)"]},{"vendor":"huawei","product":"sydney-al00_firmware","ranges":["< 9.1.0.212\\(c00e62r1p7t8\\)"]},{"vendor":"huawei","product":"sydney-tl00_firmware","ranges":["< 9.1.0.212\\(c01e62r1p7t8\\)"]},{"vendor":"huawei","product":"sydneym-al00_firmware","ranges":["< 9.1.0.212\\(c00e62r1p7t8\\)"]},{"vendor":"huawei","product":"tony-al00b_firmware","ranges":["< 10.0.0.175\\(c00e59r2p11\\)"]},{"vendor":"huawei","product":"tony-tl00b_firmware","ranges":["< 10.0.0.175\\(c01e59r2p11\\)"]},{"vendor":"huawei","product":"y9_2019_firmware","ranges":["< 9.1.0.297\\(c605e4r1p1t8\\)"]},{"vendor":"huawei","product":"yale-al00a_firmware","ranges":["< 10.1.0.160\\(c00e160r8p12\\)"]},{"vendor":"huawei","product":"yale-l21a_firmware","ranges":["< 10.1.0.231\\(c10e3r3p2\\)"]},{"vendor":"huawei","product":"yale-tl00b_firmware","ranges":["< 10.1.0.160\\(c01e160r8p12\\)"]},{"vendor":"netapp","product":"a220_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"a320_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"a800_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"aff_baseboard_management_controller_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"c190_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"cloud_backup","ranges":["all versions"]},{"vendor":"netapp","product":"data_availability_services","ranges":["all versions"]},{"vendor":"netapp","product":"fas2720_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"fas2750_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h300s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h410c_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h410s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h500s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h610s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h700s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"hci_management_node","ranges":["all versions"]},{"vendor":"netapp","product":"service_processor","ranges":["all versions"]},{"vendor":"netapp","product":"solidfire","ranges":["all versions"]},{"vendor":"netapp","product":"solidfire_baseboard_management_controller_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"steelstore_cloud_integrated_storage","ranges":["all versions"]}]}