high7.8Public exploit code
CVE-2019-2025
In binder_thread_read of binder.c, there is a possible use-after-free due to improper locking.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Android - binder Use-After-Free via racy Initialization of ->allow_user_free2019-03-06 · dos · android · Verified
Impact
In binder_thread_read of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-116855682References: Upstream kernel
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | All versions |