CVE-2019-2000 is a memory corruption vulnerability, specifically a use-after-free, found in the Android kernel's binder.c functions. This flaw affects Android devices and could allow a local attacker to escalate privileges without requiring user interaction or additional execution privileges. The vulnerability has a high CVSS score of 7.8, indicating a significant risk. Its attack vector is local, and exploitation complexity is low, potentially leading to complete compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog or Hot List, an exploit (EDB-46356) is publicly available on ExploitDB. Despite this, there is no evidence of active exploitation, and the vulnerability has received minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.