Double Free in Android
CVE-2019-1999
In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-120025196.
Vulnerability class: Double Free
EPSS: 0.008 (52.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Android — versions Android kernel
- Google Android
- Canonical Ubuntu_linux — versions 19.04
- Debian Debian_linux — versions 9.0, 10.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security@android.com (vdb-entry, Broken Link, x_refsource_BID)
- security@android.com (x_refsource_CONFIRM, Vendor Advisory)
- security@android.com (Exploit, VDB Entry, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)
- security@android.com (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)
- security@android.com (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- security@android.com (mailing-list, x_refsource_BUGTRAQ, Mailing List, Third Party Advisory)
Frequently asked questions
- What is CVE-2019-1999?
- CVE-2019-1999 is a high-severity vulnerability in Android, classified under Double Free. CVSS score: 7.8/10. Published 2019-02-28.
- How severe is CVE-2019-1999?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2019-1999 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.