Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2019-2215

Quick assessment

Affected
n/a Android
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Android是美国谷歌（Google）和开放手持设备联盟（简称OHA）的一套以Linux为基础的开源操作系统。 Android中的binder.c文件存在资源管理错误漏洞。攻击者可利用该漏洞提升权限。

AI Predicted 6.7 Difficulty: Moderate KEV EPSS 72.10% · P99

Public Exploits 3

ExploitDB · 2 EDB-47463 [local] EDB-48129 [local]
Metasploit · 1 binder_uaf.rb [exploit]

Possible ATT&CK Techniques 1 AI

T1578 · Modify Cloud Compute Infrastructure
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2019-2215

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Android 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Android是美国谷歌（Google）和开放手持设备联盟（简称OHA）的一套以Linux为基础的开源操作系统。 Android中的binder.c文件存在资源管理错误漏洞。攻击者可利用该漏洞提升权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- Android Kernel -

II. Public POCs for CVE-2019-2215

# POC Description Source Link Shenlong Link
1 None https://github.com/timwr/CVE-2019-2215 POC Details
2 None https://github.com/raystyle/CVE-2019-2215 POC Details
3 Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215 https://github.com/kangtastic/cve-2019-2215 POC Details
4 CVE 2019-2215 Android Binder Use After Free https://github.com/marcinguy/CVE-2019-2215 POC Details
5 Temproot for Bravia TV via CVE-2019-2215. https://github.com/LIznzn/CVE-2019-2215 POC Details
6 Android privilege escalation via an use-after-free in binder.c https://github.com/DimitriFourny/cve-2019-2215 POC Details
7 android-kernel-exploitation-ashfaq-CVE-2019-2215 docker setup for mac users https://github.com/qre0ct/android-kernel-exploitation-ashfaq-CVE-2019-2215 POC Details
8 Triggering and Analyzing Android Kernel Vulnerability CVE-2019-2215 https://github.com/sharif-dev/AndroidKernelVulnerability POC Details
9 PoC for old Binder vulnerability (based on P0 exploit) https://github.com/c3r34lk1ll3r/CVE-2019-2215 POC Details
10 Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215 https://github.com/Byte-Master-101/CVE-2019-2215 POC Details
11 CVE-2019-2215 https://github.com/mufidmb38/CVE-2019-2215 POC Details
12 Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration https://github.com/nicchongwb/Rootsmart-v2.0 POC Details
13 for kernel 3.18.x https://github.com/enceka/cve-2019-2215-3.18 POC Details
14 Exploit for Bad Binder https://github.com/elbiazo/CVE-2019-2215 POC Details
15 Android Kernel Vulnerability (CVE-2019-2215) temporary root PoC https://github.com/jsirichai/CVE-2019-2215 POC Details
16 Exploit for CVE-2019-2215 (bad binder) for Huawei P20 Lite https://github.com/willboka/CVE-2019-2215-HuaweiP20Lite POC Details
17 This is a bad-binder exploit affecting the android binder IPC system that was used in the wild discovered by P0 https://github.com/mutur4/CVE-2019-2215 POC Details
18 Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration https://github.com/CrackerCat/Rootsmart-v2.0 POC Details
19 CVE 2019-2215 Android Binder Use After Free https://github.com/ATorNinja/CVE-2019-2215 POC Details
20 None https://github.com/raymontag/CVE-2019-2215 POC Details
21 Unlock your Huawei device with ADB (CVE-2019-2215) https://github.com/R0rt1z2/huawei-unlock POC Details
22 Android Kernel Vulnerability (CVE-2019-2215) temporary root PoC https://github.com/stevejubx/CVE-2019-2215 POC Details
23 Andriod binder bug record https://github.com/XiaozaYa/CVE-2019-2215 POC Details
24 CVE-2019-2215 poc for Huawei hardened kernel https://github.com/llccd/TempRoot-Huawei POC Details
25 None https://github.com/0xbinder/android-kernel-exploitation-cve-2019-2215 POC Details
26 This lab guides you through setting up an environment to explore CVE-2019-2215, a critical Android kernel vulnerability in the binder subsystem. https://github.com/0xbinder/android-kernel-exploitation-lab POC Details
27 None https://github.com/mouseos/cve-2019-2215_SH-M08 POC Details
28 for kernel 3.18.x https://github.com/Enceka/cve-2019-2215-3.18 POC Details
29 demo CVE-2019-2215 (Bad Binder) for Android Q https://github.com/i-redbyte/android-badbinder-demo POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-2215

请登录查看更多情报信息。

Vendor Advisories for CVE-2019-2215 (3)

Exploits & Public PoCs for CVE-2019-2215 (2)

Mailing List Discussions for CVE-2019-2215 (4)

Other References for CVE-2019-2215 (1)

Same Patch Batch · n/a · 2019-10-11 · 44 CVEs total

CVE-2019-17059 Sophos Cyberoam firewall appliance CyberoamOS 注入漏洞
CVE-2019-14510 Kaseya VSA RMM 安全漏洞
CVE-2019-17504 Kirona Solutions Dynamic Resource Scheduling 跨站脚本漏洞
CVE-2010-5334 IceWarp Webclient 路径遍历漏洞
CVE-2010-5337 IceWarp Webclient 跨站脚本漏洞
CVE-2010-5338 IceWarp Webclient 跨站脚本漏洞
CVE-2010-5339 IceWarp Webclient 跨站脚本漏洞
CVE-2010-5340 IceWarp Webclient 跨站脚本漏洞
CVE-2019-17499 Compal CH7465LG 操作系统命令注入漏洞
CVE-2010-5336 IceWarp Webclient 跨站脚本漏洞
CVE-2019-17503 Kirona Solutions Dynamic Resource Scheduling 信息泄露漏洞
CVE-2015-9481 WordPress ThemeMakers Diplomat|Political theme 信息泄露漏洞
CVE-2015-9482 WordPress ThemeMakers Car Dealer / Auto Dealer Responsive theme 信息泄露漏洞
CVE-2015-9483 WordPress ThemeMakers Invento Responsive Gallery/Architecture Template 信息泄露漏洞
CVE-2015-9484 WordPress ThemeMakers Accio One Page Parallax Responsive theme 信息泄露漏洞
CVE-2015-9485 WordPress ThemeMakers Accio Responsive Parallax One Page Site Template信息泄露漏洞
CVE-2015-9486 WordPress ThemeMakers Axioma Premium Responsive theme 信息泄露漏洞
CVE-2015-9487 WordPress ThemeMakers Almera Responsive Portfolio theme 信息泄露漏洞
CVE-2015-9488 WordPress ThemeMakers Almera Responsive Portfolio Site Template 信息泄露漏洞
CVE-2015-9489 WordPress ThemeMakers Goodnex Premium Responsive theme 信息泄露漏洞

Showing top 20 of 44 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Android
Same vendor: n/a

V. Comments for CVE-2019-2215

No comments yet

Leave a comment