CVE-2019-1999

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Android - binder Use-After-Free of VMA via race Between reclaim and munmap2019-02-12 · dos · android · Verified

Impact

In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-120025196.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.securityfocus.com/bid/106851
• https://seclists.org/bugtraq/2019/Aug/13
• https://source.android.com/security/bulletin/2019-02-01
• https://usn.ubuntu.com/3979-1/
• https://www.debian.org/security/2019/dsa-4495
• https://www.exploit-db.com/exploits/46357/
• http://www.securityfocus.com/bid/106851
• https://seclists.org/bugtraq/2019/Aug/13
• https://source.android.com/security/bulletin/2019-02-01
• https://usn.ubuntu.com/3979-1/
• https://www.debian.org/security/2019/dsa-4495
• https://www.exploit-db.com/exploits/46357/