Vulnerability identifier: #VU35165

Vulnerability risk: Low

CVSSv3.1: 7.5 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2019-2215

CWE-ID: CWE-416

Exploitation vector: Local

Exploits in database: 7

• April 19, 2024
  • CVE-2019-2215 (This is a critical UAF vulnerability exploit that affected the android binder IPC system used in the wild and discovered by P0) [Github]
• February 8, 2024
  • CVE-2019-2215-HuaweiP20Lite (Exploit for CVE-2019-2215 (bad binder) for Huawei P20 Lite) [Github]
• December 21, 2023
  • CVE-2019-2215 (Exploit for Bad Binder) [Github]
• June 17, 2021
  • Android - Binder Driver Use-After-Free [Exploit-DB]
  • Android Binder - Use-After-Free (Metasploit) [Exploit-DB]
• October 28, 2020
  • CVE-2019-2215 (PoC for old Binder vulnerability (based on P0 exploit)) [Github]
• October 5, 2020
  • android-kernel-exploitation-ashfaq-CVE-2019-2215 (android-kernel-exploitation-ashfaq-CVE-2019-2215 docker setup for mac users ) [Github]

Impact: Code execution

Vulnerable software:
Google Android
Operating systems & Components / Operating system

Vendor: Google