Vulnerabilities > CVE-2019-2025 - Use After Free vulnerability in Google Android
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
In binder_thread_read of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-116855682References: Upstream kernel
Vulnerable Configurations
Part | Description | Count |
---|---|---|
OS | 1 |
Common Weakness Enumeration (CWE)
Exploit-Db
id | EDB-ID:46503 |
last seen | 2019-03-06 |
modified | 2019-03-06 |
published | 2019-03-06 |
reporter | Exploit-DB |
source | https://www.exploit-db.com/download/46503 |
title | Android - binder Use-After-Free via racy Initialization of ->allow_user_free |