CVE-2019-2115

HIGH

Android 7.1.1-9 - Double Free in GateKeeper::MintAuthToken

Title source: llm

Description

In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://source.android.com/security/bulletin/2019-09-01

Scores

CVSS v3 7.8

EPSS 0.0027

EPSS Percentile 18.3%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-415 CWE-787

Status published

Products (5)

google/android 7.1.1

google/android 7.1.2

google/android 8.0

google/android 8.1

google/android 9.0

Published Sep 05, 2019

Tracked Since Feb 18, 2026