Published: 19/06/2019 Updated: 21/07/2021

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

In binder_thread_read of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-116855682References: Upstream kernel

Vulnerable Product	Search on Vulmon	Subscribe to Product
google android -

The following bug report solely looks at the situation on the upstream master branch; while from a cursory look, at least the wahoo kernel also looks affected, I have only properly tested this on upstream master The binder driver permits userspace to free buffers in the kernel-managed shared memory region by using the BC_FREE_BUFFER command This ...

CWE-416 CWE-667 https://source.android.com/security/bulletin/2019-03-01 https://nvd.nist.gov https://www.exploit-db.com/exploits/46503

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-2025

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect