Search/CVE-2019-2215
● CVE — High

CVE-2019-2215

Vendordebian, netapp, canonical, google, huaweiProductdebian linux, h300s firmware, h410c firmware, h410s firmware, h500s firmware, h610s firmware, h700s firmware, ubuntu linux, android, cloud backup, steelstore cloud integrated storage, solidfire, alp-al00b firmware, hci management node, alp-tl00b firmware, service processor, data availability services, solidfire baseboard management controller firmware, a220 firmware, a320 firmware, a800 firmware, c190 firmware, fas2720 firmware, fas2750 firmware, aff baseboard management controller firmwareDiscoveredOct 11, 2019UpdatedOct 24, 2025

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

View graph Watch Export
CVSS v3.1
7.8 HIGH
EPSS
72.1%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Aug 26, 2026
▲ 28.3pp
43.8% → 72.1% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Oct 11, 2019
Disclosure — published as a CVE record. · last revised by NVD Oct 24, 2025
Public PoC (10)
github.com/timwr/CVE-2019-2215github.com/kangtastic/cve-2019-2215github.com/ATorNinja/CVE-2019-2215github.com/LIznzn/CVE-2019-2215github.com/DimitriFourny/cve-2019-2215github.com/codecat007/CVE-2019-2215github.com/qre0ct/android-kernel-exploitation-ashfaq-CVE-2019-2215github.com/sharif-dev/AndroidKernelVulnerabilitygithub.com/c3r34lk1ll3r/CVE-2019-2215github.com/Byte-Master-101/CVE-2019-2215
Unverified third-party code — review before executing.