7.8
Élevée
CVE-2019-2215 Android Kernel Use-After-Free Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-416
Description
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Android | Versions non publiées |
Autres CVE de Android
Les 2441 CVE de Android →
CVE-2023-21153
In Do_AIMS_SET_CALL_WAITING of imsservice.cpp, there is a possible out of bounds read due to a missing bounds check
Non notée
CVE-2023-21159
In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check
Non notée
CVE-2023-21148
In BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing null check
Non notée
CVE-2023-21195
In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect…
Non notée