---
id: 8661
title: "[CVE-2019-2215] Bad Binder: Android In-The-Wild Exploit"
cve: CVE-2019-2215
source_domain: projectzero.google
source_url: "https://projectzero.google/2019/11/bad-binder-android-in-wild-exploit.html"
published_at: "2019-11-21T00:00:00Z"
tags: ["android", "cve", "project-zero", "in-the-wild", "binder"]
phying_url: "https://phying.com/item/8661"
lang: en
---

# [CVE-2019-2215] Bad Binder: Android In-The-Wild Exploit

## Summary

On October 3, 2019, we disclosed issue 1942 (CVE-2019-2215), which is a use-after-free in Binder in the Android kernel. The bug is a local privilege escalation vulnerability that allows for a full compromise of a vulnerable device. If chained with a browser renderer exploit, this bug could fully compromise a device through a malicious website.

## Intelligence Metadata

- **Sources:** projectzero.google
- **CVE:** CVE-2019-2215
- **Published:** 2019-11-21T00:00:00Z
- **Original:** https://projectzero.google/2019/11/bad-binder-android-in-wild-exploit.html
- **Phying News:** https://phying.com/item/8661