CVE-2019-2215VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2019-2215: Android Kernel Use-After-Free Vulnerability

Affects Android Android KernelSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 72.1% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2019-2215 (opens in a new tab)

Description

CVE-2019-2215 is a use-after-free vulnerability in the Android Kernel's binder.c component that enables privilege escalation from an application to the Linux Kernel. It has been observed exploited in the wild, notably chained with CVE-2020-0041 and CVE-2020-0069 in the exploit chain known as "AbstractEmu." This vulnerability is classified as high severity due to its ability to elevate privileges on affected devices.

Summary

The Android Kernel contains a use-after-free vulnerability in binder.c (CVE-2019-2215) that allows an unprivileged application to escalate privileges to the Linux Kernel level. This vulnerability has been exploited in the wild and was observed as part of a chained exploit named "AbstractEmu," which also involves CVE-2020-0041 and CVE-2020-0069. The flaw is categorized under CWE-416 (Use After Free). No specific affected versions or patch information are provided in the available data.

Impact

Successful exploitation of this vulnerability allows an attacker to escalate privileges from an application context to kernel-level privileges, potentially compromising the entire device's security. It has been confirmed to be exploited in the wild, indicating active threat usage.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official patches or updates are available, users should apply any recommended security updates from Android device manufacturers promptly. Monitor official Android security bulletins for updates regarding this vulnerability.

Weaknesses

CWE-416Use After Free (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:42:09 UTC

Weaknesses

References

Related threats