Threat intelligence report · CISA KEV

CVE-2019-2215: Android Kernel Use-After-Free Vulnerability

Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu." Required action: Apply updates per vendor instructions.

· high severity · unattributed attribution

Evidence and provenance

Original source
CISA KEV report ↗
Published
2021-11-03T00:00:00Z
Confidence basis
No actor match
Record ID
269bd2fc590c19f1a9ee

Vulnerabilities

CVE-2019-2215, CVE-2020-0041, CVE-2020-0069

Use and citation

Verify the original report before making operational decisions. Cite this permanent page together with the original source, publication date, confidence level, and review status.