Exploitation Summary
CVE-2019-2215 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021.
EIP tracks 32 public exploits from researchers including Metasploit, Google Security Research, kangtastic, including a Metasploit module exploits/android/local/binder_uaf.
AI-analyzed exploit summary This Metasploit module exploits CVE-2019-2215, a use-after-free vulnerability in the Android Binder driver, to achieve local privilege escalation on vulnerable Android devices. It uploads and executes a precompiled exploit binary along with a payload to gain a Meterpreter session.
Description
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
Exploits (32)
This Metasploit module exploits CVE-2019-2215, a use-after-free vulnerability in the Android Binder driver, to achieve local privilege escalation on vulnerable Android devices. It uploads and executes a precompiled exploit binary along with a payload to gain a Meterpreter session.
This exploit demonstrates a use-after-free vulnerability in the Android Binder driver (CVE-2019-2215), leading to a kernel crash or privilege escalation. The PoC triggers the UAF by manipulating epoll and binder thread structures, confirmed on Pixel 2 devices.
This repository contains a functional exploit for CVE-2019-2215, a kernel memory R/W privilege escalation vulnerability affecting Google Pixel 2 and Pixel 2 XL devices. The exploit achieves temporary root access by leveraging arbitrary kernel memory read/write capabilities and includes a debug console for further exploration.
This repository contains a functional proof-of-concept exploit for CVE-2019-2215, a use-after-free vulnerability in the Linux kernel's Binder driver. The exploit leverages race conditions and memory corruption to achieve arbitrary kernel read/write access, ultimately leading to local privilege escalation.
This repository provides a detailed technical analysis of CVE-2019-2215, a use-after-free vulnerability in the Android kernel's binder.c. It includes a walkthrough of the vulnerability, static and dynamic analysis, and references to a PoC for exploitation.
This repository contains functional exploit code for CVE-2019-2215, a use-after-free vulnerability in the Android binder driver. It includes detailed technical documentation, fuzzing setups, and a working PoC exploit demonstrating privilege escalation.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Android Binder driver. The exploit leverages the UAF to achieve local privilege escalation (LPE) by manipulating kernel structures to bypass KASLR, disable SELinux, and escalate privileges to root.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Android Binder IPC subsystem. The exploit achieves temporary root privileges on Sony Bravia TV devices running Android 8 with kernel version 4.9.51 by manipulating kernel memory structures.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Android Binder driver. The exploit achieves temporary root access on Pixel 2 and Pixel 2 XL devices running specific kernel versions by leveraging arbitrary kernel memory read/write to bypass SELinux and escalate privileges.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Android Binder driver. The PoC demonstrates privilege escalation by manipulating kernel memory structures to bypass address space limits.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Binder driver of Android. The exploit leverages the libsepol library to manipulate SELinux policies and achieve local privilege escalation on affected Huawei devices.
The repository contains only a minimal README with no exploit code or technical details. It references a Docker image from a workshop but provides no functional PoC or analysis.
This repository contains a functional exploit for CVE-2019-2215, targeting the Huawei P20 Lite running Android 8.0.0. The exploit leverages the 'bad binder' vulnerability to achieve local privilege escalation by manipulating kernel memory structures.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free (UAF) vulnerability in the Android Binder driver. The exploit leverages arbitrary address read (AAR) and write (AAW) primitives to leak kernel addresses and overwrite `addr_limit`, ultimately achieving local privilege escalation (LPE).
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Linux kernel's binder driver, specifically targeting Huawei devices with hardened kernels. The exploit includes code to bypass Huawei's security mechanisms (e.g., SELinux, hypervisor-protected credentials) and achieve temporary root access.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Linux kernel (3.18) affecting Android devices. The PoC includes native code (poc98.c) and an Android app to achieve local privilege escalation (LPE) by exploiting the Binder driver.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Linux kernel's Binder driver. The exploit achieves arbitrary kernel read/write access and privilege escalation on Android devices running kernel 3.18.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Android Binder driver. The exploit achieves local privilege escalation (LPE) by manipulating kernel structures to gain arbitrary read-write permissions, disable SELinux, and escalate to root.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Linux kernel's binder driver, allowing local privilege escalation to root on vulnerable Android devices. The PoC includes detailed instructions for porting to other devices and demonstrates kernel memory manipulation to achieve root access.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Android Binder driver. The Makefile compiles an exploit binary for Android, and the README references a detailed writeup for further technical context.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Binder driver of Android. The exploit includes a C-based PoC and an Android app (2048-Game) modified to deliver the payload, demonstrating privilege escalation to root.
This repository contains a functional proof-of-concept exploit for CVE-2019-2215, a use-after-free vulnerability in the Android Binder driver. The exploit demonstrates arbitrary kernel read/write access, leveraging a race condition in the binder_thread struct's waitqueue handling.
This repository contains a functional exploit PoC for CVE-2019-2215, a Use-After-Free (UAF) vulnerability in the Android Binder IPC subsystem. The exploit includes detailed technical analysis, a Kotlin-based Android UI, and native C code to demonstrate the UAF, leak task_struct addresses, and attempt privilege escalation.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Binder driver of Android. The exploit code is present in the `cve-2019-2215.c` file, and the repository includes additional components like a dropper script and a modified 2048 game app, likely used for delivery or persistence.
This repository contains a functional proof-of-concept exploit for CVE-2019-2215, a use-after-free vulnerability in the Linux kernel's binder driver. The PoC demonstrates the vulnerability by triggering the freeing of a binder_thread structure and attempting to exploit the use-after-free condition via epoll operations.
This repository contains a functional proof-of-concept exploit for CVE-2019-2215, a use-after-free vulnerability in the Linux kernel's Binder driver. The exploit leverages the vulnerability to gain arbitrary kernel read/write access, demonstrating privilege escalation on affected Android devices.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Android Binder driver. The exploit leverages epoll and pipe operations to achieve arbitrary read/write primitives, ultimately disabling SELinux and escalating privileges to root.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Linux kernel's binder driver. The exploit leverages epoll and binder interactions to achieve local privilege escalation (LPE) by manipulating kernel memory structures.
This repository contains a functional proof-of-concept exploit for CVE-2019-2215, a use-after-free vulnerability in the Android Binder driver. The exploit demonstrates arbitrary kernel read/write access on vulnerable devices, such as Pixel 2, by leveraging a race condition in the binder_thread struct.
This repository contains a functional exploit for CVE-2019-2215, a use-after-free vulnerability in the Binder driver of Linux kernel 3.18. The PoC includes native code (poc98.c) and an Android app to achieve local privilege escalation (LPE) by exploiting the vulnerability to gain root access.
This repository contains a functional exploit PoC for CVE-2019-2215, a use-after-free vulnerability in the Linux kernel's binder driver. The exploit leverages the vulnerability to achieve arbitrary kernel read/write access and escalate privileges on Android devices running kernel version 3.18.
This Metasploit module exploits CVE-2019-2215, a use-after-free vulnerability in the Android Binder kernel driver, to achieve local privilege escalation. It uploads and executes a precompiled exploit binary to overwrite kernel memory structures, enabling arbitrary read/write access to kernel memory.
References (12)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H