1. Home
  2. Vulnerabilities
  3. CVE-2019-2181

CVE-2019-2181

CVSS v3.0 7.8 (High)
78% Progress
CVSS v2.0 6.9 (Medium)
69% Progress
EPSS 0.08 % (36th)
0.08% Progress
Affected Products 1
Advisories 2
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Weaknesses
CWE-190
Integer Overflow or Wraparound
CWE-787
Out-of-bounds Write
CVE Status
PUBLISHED
CNA
Android (associated with Google Inc. or Open Handset Alliance)
Published Date
2019-09-05 22:15:12
(5 years ago)
Updated Date
2020-08-24 17:37:01
(4 years ago)

Affected Products

Google

Configuration #1

    CPE23 From Up To
  Google Android cpe:2.3:o:google:android:-