High severity7.8NVD Advisory· Published Nov 13, 2019· Updated Jun 17, 2026
CVE-2019-2214
CVE-2019-2214
Description
In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-136210786References: Upstream kernel
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- Android/kerneldescription
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*+ 1 more
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.htmlnvdThird Party AdvisoryVDB Entry
- source.android.com/security/bulletin/2019-11-01nvdVendor Advisory
- usn.ubuntu.com/4226-1/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.