{"metadata": {"vulnerability": "CVE-2019-2215", "count": 189, "kinds": {"milestone": 5, "sighting": 148, "kev": 11, "other": 25}}, "data": [{"timestamp": "2018-12-10T00:00:00Z", "date_only": false, "value": "2018-12-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2019-2215", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-10-04T00:00:00Z", "date_only": false, "value": "2019-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/47463", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "eaeb7394-4ad2-4e35-951b-b15fd3778846", "url": "https://www.exploit-db.com/exploits/47463", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2019-10-04T05:41:24Z", "date_only": false, "value": "2019-10-04T05:41:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/422", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "24438e3e-5fa0-4118-bde6-48eaebc8c937", "content": "Kernel privilege escalation bug in Android affecting fully patched Pixel 2 & others\nThe bug was allegedly being used or sold by the NSO Group.\nLocal PoC exploit included. CVE-2019-2215\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=1942", "url": "https://t.me/androidMalware/422", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2019-10-06T19:14:11Z", "date_only": false, "value": "2019-10-06T19:14:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-_j8UgE87NOECrqZ3KDP0NkvSl22TTLP3GgkgXUff5a_hF4", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "588ea9b0-2748-48dd-be71-b1ad76fca901"}, {"timestamp": "2019-10-06T19:58:41Z", "date_only": false, "value": "2019-10-06T19:58:41.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wnKxIqmrA6wsmUfM50aZ9f7ztSEFBAbywcwZbgixvq8y_T8", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "6bb12abf-240b-4eeb-81d6-10b12c4ddbab"}, {"timestamp": "2019-10-07T16:05:18Z", "date_only": false, "value": "2019-10-07T16:05:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/7883", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d6c7f8d6-3306-4db9-9daf-f581c6984fa5", "content": "0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android \u043e\u043f\u0430\u0441\u043d\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Samsung, Xiaomi, Pixel \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u044f\u0434\u0440\u0435 Android \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0431\u0430\u0433, \u043f\u0435\u0440\u0435\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043c\u043d\u043e\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Pixel 2, Samsung S7, S8, S9 \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435. \n\nhttps://xakep.ru/2019/10/07/cve-2019-2215/", "url": "https://t.me/xakep_ru/7883"}, {"timestamp": "2019-10-08T00:00:00Z", "date_only": false, "value": "2019-10-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-484", "record": "CERTFR-2019-AVI-484", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2019-10-08T00:00:00Z", "date_only": true, "value": "2019-10-08", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2019-38253", "record": "CNVD-2019-38253", "field": "submitTime", "linked_record": true}, {"timestamp": "2019-10-09T19:17:50Z", "date_only": false, "value": "2019-10-09T19:17:50.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/zxnJoHkYAzFuvofYABqxZ_5eADQaz-T5A5RmEVwCQe508Eg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c6bf4260-c1d5-48e3-bedb-b13d56d2a8d4"}, {"timestamp": "2019-10-11T18:16:48Z", "date_only": false, "value": "2019-10-11T18:16:48.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-2215", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-10-11T19:15:00Z", "date_only": false, "value": "2019-10-11T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M7G6-9CWP-6JGM", "record": "GHSA-M7G6-9CWP-6JGM", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2019-10-11T19:15:00Z", "date_only": false, "value": "2019-10-11T19:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2019-2215", "record": "UBUNTU-CVE-2019-2215", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2019-10-11T19:15:00Z", "date_only": false, "value": "2019-10-11T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-2215", "record": "GSD-2019-2215", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2019-10-11T19:15:10.947Z", "date_only": false, "value": "2019-10-11T19:15:10.947", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-2215", "record": "FKIE_CVE-2019-2215", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2019-10-16T22:00:00Z", "date_only": false, "value": "2019-10-16T22:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/canyoupwnme/6059", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b184a8cf-06db-4ba8-a689-e64ab5bc9ba3", "content": "Tailoring CVE-2019-2215 to Achieve Root\nhttps://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/", "url": "https://t.me/canyoupwnme/6059", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2019-10-17T06:14:24Z", "date_only": false, "value": "2019-10-17T06:14:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/445", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d026946f-63ee-4cce-b35f-08b56c26cf6d", "content": "Qu1ckR00t - Exploit CVE-2019-2215 to Achieve Root\nBlog: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/\nPoC exploit: https://github.com/grant-h/qu1ckr00t", "url": "https://t.me/androidMalware/445", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2019-10-17T10:35:15Z", "date_only": false, "value": "2019-10-17T10:35:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/7975", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "44075475-505d-47fd-9bdc-9bb3465f9b25", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0441\u0432\u0435\u0436\u0435\u0439 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Android\n\n\u041f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b CVE-2019-2215, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443. \n\nhttps://xakep.ru/2019/10/17/qu1ckr00t/", "url": "https://t.me/xakep_ru/7975", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2019-10-17T11:58:14Z", "date_only": false, "value": "2019-10-17T11:58:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DC8044_Info/429", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "683b8791-fbae-4f82-9e31-626bec8952d2", "content": "https://github.com/grant-h/qu1ckr00t \u043f\u043e\u0434\u044c\u0435\u0445\u0430\u043b PoC  Android kernel arbitrary R/W (CVE-2019-2215)", "url": "https://t.me/DC8044_Info/429", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2019-10-18T18:03:17Z", "date_only": false, "value": "2019-10-18T18:03:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerOne/2532", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2bfe2322-26de-489d-bdb7-f9adeb28ecdc", "content": "Researcher released PoC exploit code for CVE-2019-2215 Android zero-day flaw\nhttps://ift.tt/33Fa8TX", "url": "https://t.me/HackerOne/2532", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2019-10-18T19:15:00Z", "date_only": false, "value": "2019-10-18T19:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-2215", "record": "GSD-2019-2215", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2019-10-21T19:41:28Z", "date_only": false, "value": "2019-10-21T19:41:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/orderofsixangles/40", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d95ee6ef-55fb-4175-9384-af849616b704", "content": "\u0421\u043b\u0435\u0434\u043e\u043c \u0438\u0434\u0435\u0442, \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0439 0-day \u0432 Android. \u0427\u0442\u043e \u043c\u044b \u0438\u043c\u0435\u0435\u043c \u043d\u0430 \u0434\u0435\u043b\u0435? \n\n\u0418\u043c\u0435\u0435\u043c \u043d\u043e\u0432\u043e\u0441\u0442\u044c:\nhttps://xakep.ru/2019/10/17/qu1ckr00t/\n\n\u0411\u044b\u043b\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443\u044f\u0432\u0437\u0438\u043c\u043e\u0441\u0442\u044c Use-After-Free (https://bugs.chromium.org/p/project-zero/issues/detail?id=1942), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u0435\u043b\u0430 \u043a privlege escalation. \u0422\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u043d\u0430 \u0434\u0430\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u043d\u044b\u0439 Read Write \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u044f\u0434\u0440\u0443 \u0438 \u0432 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0435 \u0438 \u0432\u0441\u0451. \u0414\u0430\u043b\u0435\u0435 \u0447\u0443\u0432\u0430\u043a \u0432\u0437\u044f\u043b \u044d\u0442\u0443 \u0434\u0438\u0447\u044c, \u0438 \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d \u0438\u043c\u0435\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043a kernel, \u043d\u0430\u0448\u0435\u043b \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 task_struct \u0432 \u044f\u0434\u0435\u0440\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0438 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0435 \u0437\u0430 SECCOMP, SELinux \u0438 \u0442.\u0434, \u0438 \u0442\u0443\u043f\u043e \u043f\u043e\u043e\u0442\u043a\u043b\u044e\u0447\u0430\u043b \u0432\u0441\u0451. (https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/). \n\n\u0422\u043e \u0435\u0441\u0442\u044c, \u0441\u0430\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0440\u0443\u0442\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0442\u043e\u043b\u044c\u043a\u043e Pixel 2 \u0438 \u0438\u043c\u0435\u043d\u043d\u043e \u0442\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0438 \u044f\u0434\u0440\u0430, \u0447\u0442\u043e \u0432 \u0441\u0442\u0430\u0442\u044c\u0435.\n\n\u0422\u0430\u043a \u0447\u0442\u043e, \u043d\u0435 \u0442\u0430\u043a\u043e\u0439 \u0443\u0436 \u0438 \u0446\u0435\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442, \u0431\u0435\u0437 \u0434\u043e\u0440\u0430\u0431\u043e\u0442\u043a\u0438 *(", "url": "https://t.me/orderofsixangles/40", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2019-10-30T00:00:00Z", "date_only": true, "value": "2019-10-30", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2019-38253", "record": "CNVD-2019-38253", "field": "openTime", "linked_record": true}, {"timestamp": "2019-11-05T00:00:00Z", "date_only": false, "value": "2019-11-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-545", "record": "CERTFR-2019-AVI-545", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2019-11-07T00:00:00Z", "date_only": false, "value": "2019-11-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-545", "record": "CERTFR-2019-AVI-545", "field": "revisions.1.revision_date", "linked_record": true}, {"timestamp": "2019-11-09T21:28:10Z", "date_only": false, "value": "2019-11-09T21:28:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/canyoupwnme/6122", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "380d5b33-35dc-4096-88ab-35eda97df67e", "content": "Analyzing Android's CVE-2019-2215 (/dev/binder UAF)\nhttps://dayzerosec.com/posts/analyzing-androids-cve-2019-2215-dev-binder-uaf/", "url": "https://t.me/canyoupwnme/6122", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2019-11-13T00:00:00Z", "date_only": false, "value": "2019-11-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-555", "record": "CERTFR-2019-AVI-555", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2019-11-14T00:00:00Z", "date_only": false, "value": "2019-11-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-555", "record": "CERTFR-2019-AVI-555", "field": "revisions.1.revision_date", "linked_record": true}, {"timestamp": "2019-11-22T05:31:17Z", "date_only": false, "value": "2019-11-22T05:31:17.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/secinfosex/23", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "ef82cc6b-55ab-431a-9352-3c4b2a803396", "content": "\u0420\u0435\u0431\u044f\u0442\u0430 \u0438\u0437 Project Zero \u043e\u043f\u0438\u0441\u0430\u043b\u0438 CVE-2019-2215, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 \u0448\u043f\u0438\u043e\u043d\u0430 Pegasus \u043e\u0442 NSO Group. \n\n\u041a\u0440\u0430\u0442\u043a\u043e:\n\n\u0418\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432 NSO Group - \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0447\u0435\u0440\u0435\u0437 \u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u0434\u0430\u0432\u043d\u043e. \u0424\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043f\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 Pegasus, \u043e\u0447\u0435\u043d\u044c \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e.\n\n\u0418\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0433\u0443\u0433\u043b\u0430 - UAF, \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Binder, \u044f\u0434\u0440\u043e, Linux kernel >= 4.14, SELinux isolated_app \u043d\u0435 \u0441\u043f\u0430\u0441\u0430\u0435\u0442, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0437 Chrome, \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0430 \u043d\u0435 \u0441\u043f\u0430\u0441\u0430\u0435\u0442.\n\n\u043e Pegasus:\n\u041c\u043e\u0434\u0443\u043b\u044c\u043d\u0430\u044f \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u043f\u0430\u0439\u0432\u0430\u0440\u044c \u043e\u0442 NSO Group. \n\u0427\u0438\u0442\u0430\u0435\u0442 sms, \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443, \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u044b, \u043f\u0438\u0448\u0435\u0442 \u0437\u0432\u0443\u043a, \u043b\u043e\u0433\u0433\u0438\u0440\u0443\u0435\u0442 \u0432\u0432\u043e\u0434, \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u0442 \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b - \u043f\u043e\u043b\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0434\u043b\u044f \u0441\u043e\u043b\u0438\u0434\u043d\u044b\u0445 \u0433\u043e\u0441\u043f\u043e\u0434.\n\n\u043e\u0431 NSO Group:\n\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0430\u044f  \u0438 \u043f\u0440\u043e\u0434\u0430\u044e\u0449\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u043b\u0435\u0436\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c Pegasus \u0438 Chrysaor.  \n\n# https://googleprojectzero.blogspot.com/2019/11/bad-binder-android-in-wild-exploit.html\n# https://www.kaspersky.ru/blog/pegasus-spyware/14569/\n# https://en.wikipedia.org/wiki/NSO_Group", "url": "https://t.me/secinfosex/23", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2019-11-22T09:12:16Z", "date_only": false, "value": "2019-11-22T09:12:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/500", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "cc657e50-0da8-44de-acd6-8d4d89193794", "content": "Analysis of use-after-free in Binder vulnerability - CVE-2019-2215\n\nThis exploit was used in-the-wild to install NSO group malware - Pegasus.\nThe bug is a local privilege escalation vulnerability that allows for a full compromise of a vulnerable device. If chained with a browser renderer exploit, this bug could fully compromise a device through a malicious website.\nhttps://googleprojectzero.blogspot.com/2019/11/bad-binder-android-in-wild-exploit.html", "url": "https://t.me/androidMalware/500", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2019-12-05T18:57:27Z", "date_only": false, "value": "2019-12-05T18:57:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/novitoll_ch/43", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "1dfc8e83-28f3-4d97-9fab-cdfa54a3bc49", "content": "\u041e\u0442 \u0430\u0432\u0442\u043e\u0440\u0430 CVE-2019-2215 \u0441 Google p0\nhttps://maddiestone.github.io/AndroidAppRE/", "url": "https://t.me/novitoll_ch/43", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2019-12-10T19:38:44Z", "date_only": false, "value": "2019-12-10T19:38:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/orderofsixangles/110", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f80f8395-0305-487c-bf35-dfff8c67a18d", "content": "\u203c\ufe0f\u203c\ufe0f \n21-\u0433\u043e \u0434\u0435\u043a\u0430\u0431\u0440\u044f (\u0441\u0443\u0431\u0431\u043e\u0442\u0430), \u0432 \u0410\u0441\u0442\u0430\u043d\u0435, \u0432 18:00, \u0431\u0443\u0434\u0435\u0442 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0432\u0441\u0442\u0440\u0435\u0447\u0430 r0crewKZ! \u041f\u0440\u043e\u0445\u043e\u0434\u0438\u0442\u044c \u0432\u0441\u0451 \u0431\u0443\u0434\u0435\u0442 \u0432 \u0442\u043e\u043c \u0436\u0435 \u043c\u0435\u0441\u0442\u0435, \u0432 Burger Shop! + \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0435 \u043f\u0438\u0432\u043e \u043e\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 (\u0432 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435)\n\n\u0422\u0435\u043c\u044b \u0434\u043e\u043a\u043b\u0430\u0434\u043e\u0432:\n\n1) CVE-2019-2215: Android Binder UAF exploitation research\n2) \u0421\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044f: \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044f\n3) cat web gsm > khs_cyberpolygon_2019.ppt\n4) RFID raw spoofing\n5) SDR \u0434\u043b\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0438\u0445\n\n\u041c\u0435\u0441\u0442\u043e: Burger shop (http://burgershop.kz/). \u041d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043d\u0430\u0439\u0434\u0435\u0442\u0435 \u043c\u0435\u043d\u044e \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\n\u041d\u0430 \u043a\u0430\u0440\u0442\u0435: https://2gis.kz/nur_sultan/firm/70000001028880208\n\u0418\u043d\u0441\u0442\u0430\u0433\u0440\u0430\u043c: https://www.instagram.com/burgershop.astana/", "url": "https://t.me/orderofsixangles/110", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2019-12-18T17:12:23Z", "date_only": false, "value": "2019-12-18T17:12:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Anonymous_TV_AR/5", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "df913bf6-27a1-49d2-9676-18e59bbc6013", "content": "\u062b\u063a\u0631\u0629 CVE-2019-2215 \u062a\u0639\u0648\u062f \u0645\u0633\u062a\u0647\u062f\u0641\u062a\u0627\u064b \u0627\u0644\u0627\u062c\u0647\u0632\u0629 \u0627\u0644\u062d\u062f\u064a\u062b\u0629 \n\n\u0623\u0648\u0636\u062d\u062a \u0634\u0631\u0643\u0629 \u063a\u0648\u063a\u0644 \u0623\u0646\u0647\u0627 \u0639\u062b\u0631\u062a \u0639\u0644\u0649 \u062f\u0644\u064a\u0644 \u0628\u0634\u0623\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u063a\u064a\u0631 \u0645\u0635\u062d\u062d\u0629 \u0641\u064a \u0646\u0638\u0627\u0645 \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0623\u0646\u062f\u0631\u0648\u064a\u062f \u062a\u0633\u062a\u062e\u062f\u0645 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0639\u0627\u0644\u0645 \u0627\u0644\u062d\u0642\u064a\u0642\u064a \u062a\u062d\u0645\u0644 \u062d\u0627\u0644\u064a\u0627 \u0627\u0644\u0627\u0633\u0645 (CVE-2019-2215).\n\u0648\u0623\u0634\u0627\u0631\u062a \u0627\u0644\u0649 \u0627\u0646\u0647 \u0628\u0627\u0644\u0631\u063a\u0645 \u0645\u0646 \u0623\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0642\u062f \u062c\u0631\u0649 \u0625\u0635\u0644\u0627\u062d\u0647\u0627 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0623\u0642\u062f\u0645 \u0645\u0646 \u0623\u0646\u062f\u0631\u0648\u064a\u062f\u060c \u0625\u0644\u0627 \u0623\u0646\u0647\u0627 \u0639\u0627\u0648\u062f\u062a \u0627\u0644\u0638\u0647\u0648\u0631 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0623\u062d\u062f\u062b.\n\u0648\u062a\u0648\u062c\u062f \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0646\u0648\u0627\u0629 \u0646\u0638\u0627\u0645 \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0623\u0646\u062f\u0631\u0648\u064a\u062f\u060c \u0648\u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0645\u0633\u0627\u0639\u062f\u0629 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0641\u064a \u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u062c\u0630\u0631 \u0644\u0644\u062c\u0647\u0627\u0632.\n\u0648\u0630\u0643\u0631\u062a \u0623\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u062a\u0645 \u062a\u0635\u062d\u064a\u062d\u0647\u0627 \u0641\u064a \u0634\u0647\u0631 \u0643\u0627\u0646\u0648\u0646 \u0627\u0644\u0627\u0648\u0644 2017 \u0641\u064a \u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0623\u0646\u062f\u0631\u0648\u064a\u062f 3.18 \u0648 4.14 \u0648 4.4 \u0648 4.9\u060c \u0644\u0643\u0646\u0647\u0627 \u0639\u062b\u0631\u062a \u0639\u0644\u064a\u0647\u0627 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0623\u062d\u062f\u062b \u0645\u0646 \u0646\u0638\u0627\u0645 \u0623\u0646\u062f\u0631\u0648\u064a\u062f.\n\u0648\u0627\u0634\u0627\u0631\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0627\u0644\u0649 \u0627\u0646 \u0628\u0627\u062d\u062b\u064a \u063a\u0648\u063a\u0644 \u064a\u0639\u062a\u0642\u062f\u0648\u0646 \u0623\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u062a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0646\u0645\u0627\u0630\u062c \u0647\u0648\u0627\u062a\u0641 \u0623\u0646\u062f\u0631\u0648\u064a\u062f \u0627\u0644\u062a\u0627\u0644\u064a\u0629 \u0627\u0644\u0639\u0627\u0645\u0644\u0629 \u0628\u0646\u0633\u062e\u0629 \u0623\u0646\u062f\u0631\u0648\u064a\u062f 8.0 \u0648\u0645\u0627 \u0628\u0639\u062f\u0647:\nGoogle Pixel.\nGoogle Pixel 1 XL.\nGoogle Pixel 2.\nGoogle Pixel 2 XL\nHuawei P20.\nXiaomi Redmi 5A.\nXiaomi Redmi Note 5.\nXiaomi A1.\nOppo A3.\nMoto Z3.\nSamsung Galaxy S7.\nSamsung Galaxy S8.\nSamsung Galaxy S9.\n+ \u0647\u0648\u0627\u062a\u0641 \u0634\u0631\u0643\u0629 \u0625\u0644 \u062c\u064a \u0627\u0644\u0639\u0627\u0645\u0644\u0629 \u0628\u0646\u0638\u0627\u0645 \u0623\u0646\u062f\u0631\u0648\u064a\u062f \u0623\u0648\u0631\u064a\u0648.", "url": "https://t.me/Anonymous_TV_AR/5"}, {"timestamp": "2019-12-26T09:42:22Z", "date_only": false, "value": "2019-12-26T09:42:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/orderofsixangles/207", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "7a073b6f-90de-4c2b-a027-d26b3e66f20e", "content": "29-\u0433\u043e \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u0432 21:00 (GMT +6) \u0431\u0443\u0434\u0435\u0442 \u0441\u0442\u0440\u0438\u043c \u043f\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c\u0443 \u0440\u0430\u0437\u0431\u043e\u0440\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 CVE-2019-2215: Android Binder UAF. \n\u0411\u0443\u0434\u0435\u043c \u0434\u0435\u0431\u0430\u0436\u0438\u0442\u044c, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 PoC \u0434\u043e r00t \u043d\u0430 Android-x86 VM, v4.14.150.\n\n\u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 2 \u0447\u0430\u0441\u0430.\n\nhttps://www.twitch.tv/novitoll", "url": "https://t.me/orderofsixangles/207", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2020-01-06T14:29:02Z", "date_only": false, "value": "2020-01-06T14:29:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5e1343da-fac8-4558-a459-07670a3b4631", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "07d06295-af53-4648-9e7d-05bc8a49e81d"}, {"timestamp": "2020-01-06T18:40:26Z", "date_only": false, "value": "2020-01-06T18:40:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/588", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "3c52e970-9510-4261-8334-4efa0b312926", "content": "First Attack Exploiting CVE-2019-2215 (use-after-free vulnerability) Found on Google Play #SideWinder\nhttps://blog.trendmicro.com/trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group/", "url": "https://t.me/androidMalware/588", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2020-01-06T19:10:31Z", "date_only": false, "value": "2020-01-06T19:10:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/antichat/7563", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "9a7863f7-351a-44f0-a5cc-7ce5e27bca11", "content": "https://blog.trendmicro.com/trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group", "url": "https://t.me/antichat/7563", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2020-01-06T23:48:14Z", "date_only": false, "value": "2020-01-06T23:48:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/19080", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "8d66246b-28a6-44df-aa1b-8c939ae2f4a5", "content": "Malicious Google Play Apps Linked to SideWinder APT The active attack involving three malicious Android applications is the first exploiting CVE-2019-2215, Trend Micro researchers report. https://www.darkreading.com/application-security/malicious-google-play-apps-linked-to-sidewinder-apt/d/d-id/1336728?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple", "url": "https://t.me/ctinow/19080", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2020-01-06T23:56:41Z", "date_only": false, "value": "2020-01-06T23:56:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/9009", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "aa3d7c32-ea4e-4582-bbd5-f2d149db8420", "content": "\ud83d\udd74 Malicious Google Play Apps Linked to SideWinder APT \ud83d\udd74\n\nThe active attack involving three malicious Android applications is the first exploiting CVE-2019-2215, Trend Micro researchers report.\n\n\ud83d\udcd6 Read\n\nvia \"Dark Reading: \".", "url": "https://t.me/cibsecurity/9009"}, {"timestamp": "2020-01-07T00:17:42Z", "date_only": false, "value": "2020-01-07T00:17:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/33872", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "eccb7bee-9c2d-42d5-8472-1b4af4649e66", "content": "Malicious Google Play Apps Linked to SideWinder APT\nhttps://www.darkreading.com/application-security/malicious-google-play-apps-linked-to-sidewinder-apt/d/d-id/1336728?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple\n\nThe active attack involving three malicious Android applications is the first exploiting CVE-2019-2215, Trend Micro researchers report.", "url": "https://t.me/information_security_channel/33872", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2020-01-07T01:06:59Z", "date_only": false, "value": "2020-01-07T01:06:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/33875", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b55d4dca-b762-4194-b34e-694191fb8758", "content": "Security researchers from Trend Micro observed three malicious apps on Google play that aims to compromise victim\u2019s devices and to steal information. The three apps include \u201cCamero, FileCryptManager & CallCam,\u201d among the three Camero is the one exploits use-after-free vulnerability CVE-2019-2215. This is the first attack spotted in wild using exploits CVE-2019-2215 that resides in [\u2026]\nThe post Hackers Exploit Android Vulnerability to Install Malware Without User Interaction Via Google Play (https://gbhackers.com/sidewinder-apt-group/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/33875", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2020-01-07T18:00:34Z", "date_only": false, "value": "2020-01-07T18:00:34.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/572", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "79f8ade1-c47a-4f6e-bf32-cdf9472483d4", "content": "3 Malicious apps distributed via Google Play Store were exploiting a critical Android rooting flaw (CVE-2019-2215) almost 6 months before it was discovered that Israeli surveillance firm NSO Group used the flaw as zero-day\n.\n\nRead: https://thehackernews.com/2020/01/android-zero-day-malware-apps.html", "url": "https://t.me/thehackernews/572", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2020-01-07T18:12:11Z", "date_only": false, "value": "2020-01-07T18:12:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/19103", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "36cc91b6-bca9-4526-a3ae-9758d7f26ce6", "content": "Three Android Apps Have Been Exploiting CVE-2019-2215 Since March\n\nhttps://ift.tt/2usREdd", "url": "https://t.me/ctinow/19103"}, {"timestamp": "2020-01-08T19:14:41Z", "date_only": false, "value": "2020-01-08T19:14:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/orderofsixangles/212", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b0444f19-b10b-4079-9248-20e4ede18f24", "content": "\ud83d\udc7e CVE-2019-2215 \ud83d\udc7e\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u044f\u0434\u0440\u0435 Android \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0431\u0430\u0433, \u043f\u0435\u0440\u0435\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043c\u043d\u043e\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Android. \u041f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\ud83d\udcac \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Google \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0438\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f CVE-2019-2215 \u2013 \u0434\u0435\u043b\u043e \u0440\u0443\u043a \u043d\u0435\u0431\u0435\u0437\u044b\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NSO Group. \n\n\u261d\ud83c\udffb \u041d\u0430\u043f\u043e\u043c\u043d\u044e, \u0447\u0442\u043e NSO Group \u0431\u044b\u043b\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u0432 2010 \u0433\u043e\u0434\u0443 \u0438 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u043e\u0439 \u043b\u0435\u0433\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u043b\u0432\u0430\u0440\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u044d\u043a\u043f\u043b\u043e\u0438\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 0-day, \u043f\u0440\u043e\u0434\u0430\u0435\u0442 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c \u0438 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u0420\u0430\u0437\u0431\u043e\u0440 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u0420\u0443\u0441\u0441\u043a\u043e\u043c \u044f\u0437\u044b\u043a\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 \u0422\u0432\u0438\u0447\u0435.\n\n\ud83d\udccc https://www.twitch.tv/videos/527925171\n\n\ud83d\ude0e \u0410\u0432\u0442\u043e\u0440 @novitoll_ch | @novitoll\n\n\ud83d\udc68\ud83c\udffb\u200d\ud83d\udcbb \u0422\u0432\u0438\u0447 \u0430\u0432\u0442\u043e\u0440\u0430: https://www.twitch.tv/novitoll\n\n\u203c\ufe0f \u041f\u043e \u0440\u0435\u0433\u043b\u0430\u043c\u0435\u043d\u0442\u0430\u043c \u0442\u0432\u0438\u0447\u0430 \u0432\u0438\u0434\u0435\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e 14 \u0434\u043d\u0435\u0439 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438. \u0414\u0430\u043d\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d 10 \u0434\u043d\u0435\u0439 \u043d\u0430\u0437\u0430\u0434. \u0423 \u0412\u0430\u0441 \u0435\u0441\u0442\u044c \u0432\u0440\u0435\u043c\u044f 4-5 \u0434\u043d\u0435\u0439 \u0434\u043b\u044f \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u043b\u0435\u043d\u0438\u044f\u203c\ufe0f\n\n\u041f\u043e\u0441\u0442\u0430\u0440\u0430\u0435\u043c\u0441\u044f \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0438 \u0437\u0430\u043b\u0438\u0442\u044c \u0432 \u043f\u0440\u0438\u0432\u0430\u0442 \u043a\u0430\u043d\u0430\u043b. \u0427\u0442\u043e \u0431\u044b \u0432\u0438\u0434\u0435\u043e \u043d\u0435 \u043f\u0440\u043e\u043f\u0430\u043b\u043e. \u041e\u0447\u0435\u043d\u044c \u0446\u0435\u043d\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f. \u0418\u0437\u0443\u0447\u0430\u0439\u0442\u0435.\n\n#cve #2019 #2215", "url": "https://t.me/orderofsixangles/212", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2020-01-09T14:07:21Z", "date_only": false, "value": "2020-01-09T14:07:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/alexmakus/3223", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "32d5023e-b436-49e6-bfe1-e56ca651f400", "content": "\u041f\u0440\u0438\u0432\u0435\u0442. \u0411\u0443\u0434\u0435\u043c \u043f\u043e\u0442\u0438\u0445\u043e\u043d\u044c\u043a\u0443 \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u0447\u043d\u043e\u0439 \u043a\u043e\u043c\u044b, \u0442\u0435\u043c \u0431\u043e\u043b\u0435\u0435, \u0447\u0442\u043e \u0432 \u043c\u0438\u0440\u0435 \u0438\u043d\u0444\u043e\u0441\u0435\u043a\u0430 \u0436\u0438\u0437\u043d\u044c \u043d\u0435 \u043e\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0441\u044c, \u0430 \u0434\u0430\u0436\u0435 \u0441\u0438\u043b\u044c\u043d\u043e \u0431\u0443\u0440\u043b\u0438\u0442. \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0441\u0442\u0430\u043b\u0430 \u043d\u0435\u043e\u0442\u0434\u0435\u043b\u0438\u043c\u0430 \u043e\u0442 \u0438\u043d\u0444\u043e\u0441\u0435\u043a\u0430, \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043c\u044b \u0443\u0432\u0438\u0434\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439, \u0433\u0434\u0435 \u0431\u0443\u0434\u0443\u0442 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0421\u0428\u0410 \u0438 \u0418\u0440\u0430\u043d. \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u0430\u0440\u0443 \u0434\u043d\u0435\u0439 \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u043c\u043d\u043e\u0433\u043e \u0430\u043f\u0434\u0435\u0439\u0442\u043e\u0432 \u0441 \u0434\u0435\u0444\u0435\u0439\u0441\u0430\u043c\u0438 \u0441\u0430\u0439\u0442\u043e\u0432, \u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0436\u0438\u0434\u0430\u0442\u044c \u0438 \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u044d\u043a\u0448\u0435\u043d\u043e\u0432. \n\n\u043d\u043e \u043f\u043e\u043a\u0430 \u0447\u0442\u043e \u043f\u043e\u043f\u0440\u043e\u0449\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u2014\u00a0\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 Google Play (Camero, FileCrypt \u0438 callCam) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 NSO Group. \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u0442\u0438\u0445\u0430\u0440\u044f \u0440\u0443\u0442\u044f\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0438 \u043f\u043e\u0442\u043e\u043c \u0432\u044b\u0433\u0440\u0435\u0431\u0430\u044e\u0442 \u0432\u0441\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0441 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \n\nhttps://blog.trendmicro.com/trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group/", "url": "https://t.me/alexmakus/3223", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2020-01-31T20:38:28Z", "date_only": false, "value": "2020-01-31T20:38:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeby_sec/2717", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d14371cb-087d-4b7a-9cc0-bedcb80cf9ed", "content": "\u200b\u200b\u0410\u043d\u0430\u043b\u0438\u0437 CVE-2019-2215(/dev/binder UAF)\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0435\u043b\u044c, \u044f \u043f\u044b\u0442\u0430\u043b\u0441\u044f \u043f\u043e\u043d\u044f\u0442\u044c \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0439 Android Binder Use-After-Free (UAF), \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Google Project Zero (p0). \u042d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u043d\u0435 \u043d\u043e\u0432\u044b\u0439, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u044f\u0434\u0440\u0435 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2018 \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e, p0 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0441\u0442\u0430\u0442\u044c\u044e \u043d\u0430 \u043a\u043e\u0434\u0435\u0431\u0430\u0439: https://codeby.net/threads/analiz-cve-2019-2215-dev-binder-uaf.69977/\n\n#android #cve #java #kernelleak", "url": "https://t.me/codeby_sec/2717", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2020-02-18T20:18:03Z", "date_only": false, "value": "2020-02-18T20:18:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/androidMalware/681", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "593b655d-d5a4-42e1-aa06-c638070bbb67", "content": "The Android Binder PoC exploit (CVE-2019-2215)\nhttps://github.com/DimitriFourny/cve-2019-2215", "url": "https://t.me/androidMalware/681", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2020-02-23T09:15:48Z", "date_only": false, "value": "2020-02-23T09:15:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/binder_uaf.rb", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "5eb21c9f-e5fb-4275-aa6f-e67f6f08d394", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/binder_uaf.rb"}, {"timestamp": "2020-02-24T00:00:00Z", "date_only": false, "value": "2020-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/48129", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0d8d4857-2011-416e-8a6f-cd410094e87e", "url": "https://www.exploit-db.com/exploits/48129", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2020-03-02T19:06:43Z", "date_only": false, "value": "2020-03-02T19:06:43.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / google_android", "record": "CVE-2019-2215", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-03-04T00:00:00Z", "date_only": false, "value": "2020-03-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-123", "record": "CERTFR-2020-AVI-123", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2020-03-20T07:07:57Z", "date_only": false, "value": "2020-03-20T07:07:57.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/jFjf8KlZQyyL5_1x0nAuLdWnAtEkx6djpi_LpaJNCl3ZBg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d4710a90-929f-4ec8-862e-c4526bd62433"}, {"timestamp": "2020-04-16T21:01:31Z", "date_only": false, "value": "2020-04-16T21:01:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/androidMalware/768", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0e741af4-f9e5-420a-8930-129152ae234f", "content": "Android workshop: kernel vulnerability analysis and exploitation (CVE-2019-2215 - Use after Free)\nhttps://cloudfuzz.github.io/android-kernel-exploitation/\nhttps://github.com/cloudfuzz/android-kernel-exploitation", "url": "https://t.me/androidMalware/768", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2020-05-03T10:48:24Z", "date_only": false, "value": "2020-05-03T10:48:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/novitoll_ch/68", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2f5879ab-eac4-4dda-8ec7-31af6d424a0e", "content": "\u0417\u0430\u0433\u0440\u0443\u0437\u0438\u043b \u043d\u0430 \u042e\u0442\u0443\u0431 \u0441\u0442\u0430\u0440\u044b\u0439 \u043c\u043e\u0439 \u0441\u0442\u0440\u0438\u043c (\u0414\u0435\u043a\u0430\u0431\u0440\u044c 29, 2019) \u043f\u0440\u043e CVE-2019-2215.\nhttps://www.youtube.com/watch?v=iu6xPThoHZ8\n\n\u0418 \u043c\u043e\u0438 \u043d\u043e\u0432\u044b\u0435 \u0432\u0438\u0434\u043e\u0441\u044b \u043d\u0430 \u0430\u043d\u0433\u043b\u0438\u0439\u0441\u043a\u043e\u043c:\n\n-  CVE-2019-2215: TL;DR *no demo*\nhttps://www.youtube.com/watch?v=RT7BjSACrv0\n\n- Vulnserver KSTET (socket reuse)\nhttps://www.youtube.com/watch?v=6MFUR9J_gro", "url": "https://t.me/novitoll_ch/68"}, {"timestamp": "2020-05-18T18:34:25Z", "date_only": false, "value": "2020-05-18T18:34:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/novitoll_ch/69", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "269f1ab8-2031-4e96-9e47-59659afeb360", "content": "RnD \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0426\u0410\u0420\u041a\u0410, \u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u044f\u0445, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0432 \u0432\u0438\u0434\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android \u2013 CVE-2019-2215 Android Bad Binder Use-After-Free [1]. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 (root) \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0435 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u0434 \u043b\u044e\u0431\u044b\u043c \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u044e\u0437\u0435\u0440\u043e\u043c. \u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Google Project Zero (Maddie Stone) 27 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2019 \u0433\u043e\u0434\u0430 [2]. \n\n\u0414\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u043e\u044f\u0441\u043d\u0438\u043c, \u0430\u043d\u0430\u043b\u043e\u0433 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u043a\u0430\u043a \u043a\u0438\u0431\u0435\u0440\u043e\u0440\u0443\u0436\u0438\u0435, \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c, \u0441 2017 \u0433\u043e\u0434\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android, \u041d\u041e \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043d\u0435 \u0432\u044b\u0439\u0434\u0435\u0442, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u0435\u0440\u0438\u043e\u0434 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0443\u0436\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0447\u0435\u043d\u044c \u0440\u0435\u0434\u043a\u043e \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0432\u0432\u0438\u0434\u0443 \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u0435\u0444\u0438\u0446\u0438\u0442\u0430 \u043a\u043e\u043c\u043f\u0435\u0442\u0435\u043d\u0446\u0438\u0438. \u041c\u044b \u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0434 \u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0443 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u043b\u044b \u0432 \u0442\u0430\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435 \u043a\u0430\u043a \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Android \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0446\u0435\u043d\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430. \u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u0430\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0430 \u043f\u0440\u0438\u0440\u043e\u0434\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android.\n\n\u041d\u0430\u0448\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0443\u0436\u0435 \u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u043c\u0438 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0437\u043d\u0430\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 \u0432\u0441\u0442\u0440\u0435\u0447\u0435 \u00abR0 crew KZ\u00bb (https://t.me/r0crewKZ) \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2019 \u0433\u043e\u0434\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043e\u0431\u0443\u0447\u0430\u044e\u0449\u0438\u0439 \u0441\u0442\u0440\u0438\u043c [3].\n\n\u0412 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0440\u0430\u0437\u043d\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0434\u043b\u044f \u043a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u044d\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u043e\u043f\u044b\u0442. \u042d\u0442\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u043c\u044b \u0440\u0435\u0448\u0430\u043b\u0438 \u0437\u0430\u0434\u0430\u0447\u0443 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u043f\u043e\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435\u0442 \u0433\u043e\u0442\u043e\u0432\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043c\u044b \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0432\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u2013 Xiaomi Redmi 5 \u0438 Samsung A520F (Galaxy A5).\n\n\u041d\u0430 \u0432\u0438\u0434\u0435\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u0438\u0434\u0435\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u0435\u043c \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0440\u044f\u0434\u0430 \u0431\u0430\u0442\u0430\u0440\u0435\u0438 \u043d\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 1 000 000 %.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435, \u0432 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0437\u043d\u0430\u043d\u0438\u044f \u043e \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0435 \u0430\u0442\u0430\u043a, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0442 \u043d\u0430\u043c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0435\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0426\u0410\u0420\u041a\u0410 \u043f\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b BULAQ, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439 \u0432 \u0441\u0435\u0431\u044f \u0446\u0435\u043b\u0443\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u041e\u0434\u043d\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u2013 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d.\n\n[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2215\n[2] https://bugs.chromium.org/p/project-zero/issues/detail?id=1942\n[3] https://youtu.be/iu6xPThoHZ8?t=2459, https://youtu.be/RT7BjSACrv0?t=33", "url": "https://t.me/novitoll_ch/69", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2020-10-09T14:06:38Z", "date_only": false, "value": "2020-10-09T14:06:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f6a84ed8-143b-4c4c-a232-4529f4878764", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "296e0126-dce1-415b-84bb-80314e83946c"}, {"timestamp": "2020-12-09T17:20:33Z", "date_only": false, "value": "2020-12-09T17:20:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/6133782e-8869-430d-ac0f-9a161f6dca52", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "1dcf619e-0059-4181-9eae-185b165b133e"}, {"timestamp": "2021-09-21T06:42:55Z", "date_only": false, "value": "2021-09-21T06:42:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pwnwiki_zhchannel/5", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "ed462b24-b415-4f07-ab43-b9ddb22dbd32", "content": "Android\u5167\u6838\u63d0\u6b0a\u6f0f\u6d1eCVE-2019-2215 Binder UAF\nhttps://www.pwnwiki.org/index.php?title=Android%E5%85%A7%E6%A0%B8%E6%8F%90%E6%AC%8A%E6%BC%8F%E6%B4%9ECVE-2019-2215_Binder_UAF", "url": "https://t.me/pwnwiki_zhchannel/5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-2215", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "fd98c742-c296-4f75-878c-9671726e5bf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2019-2215", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "b9d91a31-f5f7-484e-9e9b-bfcb87b6861a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-2215", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2019-2215", "record": "GSD-2019-2215", "field": "namespaces.cisa.gov.dateAdded", "linked_record": true}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2019-2215", "field": "evidence.0.details.added_date", "uuid": "b9d91a31-f5f7-484e-9e9b-bfcb87b6861a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2019-2215", "field": "evidence.0.details.date_added", "uuid": "fd98c742-c296-4f75-878c-9671726e5bf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2019-2215", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "fd98c742-c296-4f75-878c-9671726e5bf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2019-2215", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "b9d91a31-f5f7-484e-9e9b-bfcb87b6861a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2019-2215", "field": "status.status_updated_at", "uuid": "fd98c742-c296-4f75-878c-9671726e5bf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2019-2215", "field": "status.status_updated_at", "uuid": "b9d91a31-f5f7-484e-9e9b-bfcb87b6861a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-2215", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:16Z", "date_only": false, "value": "2021-11-08T08:58:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "12bc9f03-bdfa-4567-ad6b-c91a30b32acb"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2763a275-3670-435a-969a-243e0998f373"}, {"timestamp": "2022-02-01T04:44:53Z", "date_only": false, "value": "2022-02-01T04:44:53.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/512", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0e63051f-ff85-459c-8a6a-f8bbaab367da", "content": "#Threat_Research\n1. First Active Attack Exploiting CVE-2019-2215 Found on Google Play, Linked to SideWinder APT Group\nhttps://blog.trendmicro.com/trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group\n2. Zero day vulnerabilities in Determine Selectica Contract Lifecycle Management (SCLM)\nhttps://www.n00py.io/2020/01/zero-day-exploit-in-determine-selectica-contract-lifecycle-management-sclm-v5-4", "url": "https://t.me/CyberSecurityTechnologies/512", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2022-02-19T10:18:40Z", "date_only": false, "value": "2022-02-19T10:18:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1738", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c0eadd0f-5d08-40bb-ac74-f47b08daa973", "content": "#exploit\nExploiting CVE-2019-2215:\nBrief introduction to binder, eventpoll subsystem and Vectored I/O\nhttps://cutesmilee.github.io/kernel/linux/android/2022/02/17/cve-2019-2215_writeup.html\n]-> PoC: https://github.com/cutesmilee/cutesmilee.github.io/blob/main/code/cve-2019-2215-exploit.c\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1738", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-02-19T13:30:24Z", "date_only": false, "value": "2022-02-19T13:30:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5449", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2c0a9663-6717-4037-978a-bfcbf15b398f", "content": "#exploit\nExploiting CVE-2019-2215:\nBrief introduction to binder, eventpoll subsystem and Vectored I/O\nhttps://cutesmilee.github.io/kernel/linux/android/2022/02/17/cve-2019-2215_writeup.html\n]-> PoC: https://github.com/cutesmilee/cutesmilee.github.io/blob/main/code/cve-2019-2215-exploit.c", "url": "https://t.me/CyberSecurityTechnologies/5449", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2019-2215", "field": "evidence.0.details.due_date", "uuid": "fd98c742-c296-4f75-878c-9671726e5bf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2019-2215", "record": "GSD-2019-2215", "field": "namespaces.cisa.gov.dueDate", "linked_record": true}, {"timestamp": "2022-05-24T16:58:40Z", "date_only": false, "value": "2022-05-24T16:58:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M7G6-9CWP-6JGM", "record": "GHSA-M7G6-9CWP-6JGM", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-09-08T08:03:41Z", "date_only": false, "value": "2022-09-08T08:03:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/10167", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2c12a72c-d9cf-46f4-b28e-38930d28aac2", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Kernel exploitation - CVE-2019-2215\n\nhttps://github.com/ameetsaahu/Kernel-exploitation/blob/main/CVE-2019-2215/exploit.c", "url": "https://t.me/cKure/10167", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-04T15:50:00Z", "date_only": false, "value": "2022-11-04T15:50:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f5af9261-28f1-496a-a094-2b9a3e29954f", "url": "https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html"}, {"timestamp": "2023-11-28T11:40:27Z", "date_only": false, "value": "2023-11-28T11:40:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/629", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f10cb5c3-7a92-46ae-b22e-1110152fe70a", "content": "#ExploitObserverAlert\n\nCVE-2019-2215\n\nDESCRIPTION: Exploit Observer has 66 entries related to CVE-2019-2215. A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095\n\nFIRST-EPSS: 0.003000000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/629"}, {"timestamp": "2023-12-03T13:18:45Z", "date_only": false, "value": "2023-12-03T13:18:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/940", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "13f663d1-a433-4545-b6f1-722237aa84ab", "content": "#ExploitObserverAlert\n\nCVE-2019-2215\n\nDESCRIPTION: Exploit Observer has 65 entries related to CVE-2019-2215. A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095\n\nFIRST-EPSS: 0.003000000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/940"}, {"timestamp": "2023-12-13T01:23:46.057Z", "date_only": false, "value": "2023-12-13T01:23:46.057153Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-2215", "record": "GSD-2019-2215", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-02-28T11:10:03Z", "date_only": false, "value": "2024-02-28T11:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c9fa790-f4b2-44e5-bd3c-593bd7113bef", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c383d985-67ba-430f-bb7e-692b27ca1791"}, {"timestamp": "2024-08-04T18:42:50.933Z", "date_only": false, "value": "2024-08-04T18:42:50.933Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2019-2215", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-19T15:14:12Z", "date_only": false, "value": "2024-09-19T15:14:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/HJe9oA1GC8_YbmZuFCP-7wna5xe1Ce0txJlZSEsUniShhv3O", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "01408dbf-5415-4cc7-86ce-268af2753acc", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-11T21:29:41Z", "date_only": false, "value": "2024-10-11T21:29:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/424", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "3028668b-fce8-4f5d-81df-c0385527b9f0", "content": "#exploit\n1. Tailoring CVE-2019-2215 to Achieve Root\nhttps://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root\n]->  PoC1,  PoC2 \n\n2. CVE-2019-16663, CVE-2019-16662:\nrConfig v3.9.2 auth/unauth RCE\nhttps://shells.systems/rconfig-v3-9-2-authenticated-and-unauthenticated-rce-cve-2019-16663-and-cve-2019-16662", "url": "https://t.me/CyberSecurityTechnologies/424", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-12-24T20:25:08.478Z", "date_only": false, "value": "2024-12-24T20:25:08.478237Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971159", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "6eafea1c-2a66-4599-8127-a4729d7bc343", "url": "https://feedsin.space/feed/CISAKevBot/items/2971159"}, {"timestamp": "2024-12-24T20:25:09.438Z", "date_only": false, "value": "2024-12-24T20:25:09.438610Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971160", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "5059480c-abac-4547-b1b1-43f3dff0f355", "url": "https://feedsin.space/feed/CISAKevBot/items/2971160"}, {"timestamp": "2024-12-24T20:25:10.300Z", "date_only": false, "value": "2024-12-24T20:25:10.300438Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971161", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0b4a5845-48c6-4d21-9d9c-344e8b6ac40e", "url": "https://feedsin.space/feed/CISAKevBot/items/2971161"}, {"timestamp": "2025-01-30T18:05:01Z", "date_only": false, "value": "2025-01-30T18:05:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DaleelCyberSecurity/80", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "9cc78efb-ad13-4ea5-a0be-55bdd99f16b4", "content": "\u0645\u0627 \u0647\u064a \u062b\u063a\u0631\u0629 \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 (Zero-Day Exploit)\u061f\n\n\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u063a\u064a\u0631 \u0645\u0639\u0631\u0648\u0641\u0629 \u0644\u0644\u0645\u0637\u0648\u0631\u064a\u0646 \u0623\u0648 \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0627\u0644\u0645\u0633\u0624\u0648\u0644\u0629 \u0639\u0646 \u0627\u0644\u0646\u0638\u0627\u0645\u060c \u0645\u0645\u0627 \u064a\u0639\u0646\u064a \u0623\u0646\u0647\u0627 \u0644\u0645 \u062a\u064f\u0635\u0644\u062d \u0628\u0639\u062f \u0648\u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0642\u0628\u0644 \u0623\u0646 \u064a\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641\u0647\u0627 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u062a\u062d\u062f\u064a\u062b \u0644\u0647\u0627.\n\n\n---\n\n\u0643\u064a\u0641 \u062a\u0639\u0645\u0644\u061f\n\n\u0639\u0646\u062f \u0627\u0643\u062a\u0634\u0627\u0641 \u062b\u063a\u0631\u0629 \u062c\u062f\u064a\u062f\u0629\u060c \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0642\u0628\u0644 \u0623\u0646 \u062a\u0635\u062f\u0631 \u0627\u0644\u0634\u0631\u0643\u0629 \u062a\u0635\u062d\u064a\u062d\u064b\u0627 \u0623\u0645\u0646\u064a\u064b\u0627. \u064a\u062a\u0645 \u0630\u0644\u0643 \u0639\u0627\u062f\u0629\u064b \u0645\u0646 \u062e\u0644\u0627\u0644:\n\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0623\u062e\u0637\u0627\u0621 \u0628\u0631\u0645\u062c\u064a\u0629 \u0641\u064a \u0627\u0644\u0646\u0638\u0627\u0645 \u0623\u0648 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a.\n\n\u062a\u062c\u0627\u0648\u0632 \u0622\u0644\u064a\u0627\u062a \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0645\u062b\u0644 SELinux \u0623\u0648 Google Play Protect.\n\n\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u062e\u0628\u064a\u062b\u0629 \u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0645\u0631\u062a\u0641\u0639\u0629 (Root \u0623\u0648 SYSTEM).\n\n\n\n---\n\n\u0643\u064a\u0641 \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0623\u0646\u062f\u0631\u0648\u064a\u062f\u061f\n\n\u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0641\u064a \u0623\u0646\u062f\u0631\u0648\u064a\u062f \u064a\u0645\u0643\u0646 \u0623\u0646 \u062a\u0643\u0648\u0646 \u0641\u064a \u0639\u062f\u0629 \u0623\u0645\u0627\u0643\u0646:\n\n1. \u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0638\u0627\u0645 (Kernel Exploits):\n\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0623\u062e\u0637\u0627\u0621 \u0641\u064a \u0646\u0648\u0627\u0629 \u0627\u0644\u0646\u0638\u0627\u0645 \u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0645\u0631\u062a\u0641\u0639\u0629.\n\n\u0623\u0645\u062b\u0644\u0629: \u062b\u063a\u0631\u0629 Dirty Cow (CVE-2016-5195)\u060c \u0648\u062b\u063a\u0631\u0627\u062a \u062a\u062c\u0627\u0648\u0632 SELinux.\n\n\n\n2. \u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 (Framework Exploits):\n\n\u0627\u0633\u062a\u0647\u062f\u0627\u0641 \u0645\u0643\u0648\u0646\u0627\u062a \u0627\u0644\u0646\u0638\u0627\u0645 \u0645\u062b\u0644 MediaServer \u0623\u0648 WebView.\n\n\u062a\u0646\u0641\u064a\u0630 \u0623\u0643\u0648\u0627\u062f \u062e\u0628\u064a\u062b\u0629 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0645\u0644\u0641\u0627\u062a PDF \u0623\u0648 MP4 \u0623\u0648 \u0635\u0648\u0631 \u0645\u0634\u0648\u0647\u0629.\n\n\n\n3. \u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0627\u0644\u0645\u062a\u0635\u0641\u062d\u0627\u062a (Browser Exploits):\n\n\u062a\u0646\u0641\u064a\u0630 \u0623\u0643\u0648\u0627\u062f \u062c\u0627\u0641\u0627\u0633\u0643\u0631\u064a\u0628\u062a \u062e\u0628\u064a\u062b\u0629 \u0645\u0646 \u062e\u0644\u0627\u0644 WebView \u0623\u0648 Chrome.\n\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 JavaScript Engine \u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u0639\u062f (RCE).\n\n\n\n4. \u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u0630\u0627\u0643\u0631\u0629 (Heap / Stack Exploits):\n\n\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062a\u0642\u0646\u064a\u0627\u062a \u0645\u062b\u0644 Buffer Overflow \u0623\u0648 Use-After-Free \u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u062a\u062d\u0643\u0645 \u0643\u0627\u0645\u0644 \u0628\u0627\u0644\u062c\u0647\u0627\u0632.\n\n\n\n5. \u062b\u063a\u0631\u0627\u062a \u0641\u064a \u062e\u062f\u0645\u0627\u062a \u0627\u0644\u0646\u0638\u0627\u0645 (System Services Exploits):\n\n\u0645\u062b\u0644 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 ADB \u0641\u064a \u0627\u0644\u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u062a\u064a \u062a\u062a\u0631\u0643\u0647 \u0645\u0641\u0639\u0651\u0644\u064b\u0627.\n\n\n\n\n\n---\n\n\u0643\u064a\u0641 \u064a\u062d\u0635\u0644 \u0627\u0644\u0647\u0627\u0643\u0631\u0632 \u0639\u0644\u0649 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631\u061f\n\n\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0644\u0644\u0628\u062d\u062b \u0639\u0646 \u062a\u063a\u064a\u064a\u0631\u0627\u062a \u064a\u0645\u0643\u0646 \u0639\u0643\u0633\u0647\u0627 \u0644\u0627\u0633\u062a\u0646\u062a\u0627\u062c \u0627\u0644\u062b\u063a\u0631\u0627\u062a.\n\n\u0645\u0631\u0627\u062c\u0639\u0629 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0645\u0635\u062f\u0631\u064a \u0644\u0623\u0646\u0638\u0645\u0629 \u0623\u0646\u062f\u0631\u0648\u064a\u062f \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 (AOSP).\n\n\u0627\u0633\u062a\u062e\u062f\u0627\u0645 Fuzzing \u0644\u0625\u0631\u0633\u0627\u0644 \u0628\u064a\u0627\u0646\u0627\u062a \u0639\u0634\u0648\u0627\u0626\u064a\u0629 \u0644\u0627\u062e\u062a\u0628\u0627\u0631 \u0633\u0644\u0648\u0643 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a.\n\n\u0627\u0644\u0628\u062d\u062b \u0641\u064a \u0627\u0644\u062a\u0633\u0631\u064a\u0628\u0627\u062a \u0648\u0627\u0644\u0645\u0646\u062a\u062f\u064a\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629 \u062d\u064a\u062b \u064a\u062a\u0645 \u0628\u064a\u0639 \u0627\u0644\u062b\u063a\u0631\u0627\u062a.\n\n\n\n---\n\n\u0647\u0644 \u064a\u0645\u0643\u0646\u0646\u064a \u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u062b\u063a\u0631\u0629 \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631\u061f\n\n\u0625\u0630\u0627 \u0643\u0646\u062a \u0628\u0627\u062d\u062b\u064b\u0627 \u0623\u0645\u0646\u064a\u064b\u0627\u060c \u064a\u0645\u0643\u0646\u0643 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062f\u0648\u0627\u062a \u0645\u062b\u0644 AFL\u060c Frida\u060c Ghidra\u060c IDA Pro \u0644\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0648\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a.\n\n\u0625\u0630\u0627 \u0643\u0646\u062a \u062a\u0631\u064a\u062f \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u0642\u0637\u060c \u0641\u0645\u0639\u0638\u0645 \u062b\u063a\u0631\u0627\u062a Zero-Day \u062a\u0643\u0648\u0646 \u062e\u0627\u0635\u0629 \u0648\u064a\u062a\u0645 \u0628\u064a\u0639\u0647\u0627 \u0641\u064a \u0627\u0644\u0633\u0648\u0642 \u0627\u0644\u0633\u0648\u062f\u0627\u0621 \u0628\u0623\u0633\u0639\u0627\u0631 \u062a\u0628\u062f\u0623 \u0645\u0646 10,000$ \u0648\u0642\u062f \u062a\u0635\u0644 \u0625\u0644\u0649 \u0645\u0644\u064a\u0648\u0646 \u062f\u0648\u0644\u0627\u0631 (\u062e\u0627\u0635\u0629 \u062b\u063a\u0631\u0627\u062a iOS \u0648\u0623\u0646\u062f\u0631\u0648\u064a\u062f).\n\n\n\n---\n\n\u0623\u0634\u0647\u0631 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0641\u064a \u0623\u0646\u062f\u0631\u0648\u064a\u062f\n\nCVE-2019-2215: \u062b\u063a\u0631\u0629 \u062a\u062c\u0627\u0648\u0632 Kernel Sandbox.\n\nCVE-2020-0022: \u062b\u063a\u0631\u0629 Bluetooth RCE \u062a\u062a\u064a\u062d \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0639\u0646 \u0628\u0639\u062f.\n\nCVE-2023-20963: \u0627\u0633\u062a\u063a\u0644\u0627\u0644 Intent \u0644\u0644\u0647\u0631\u0648\u0628 \u0645\u0646 \u0627\u0644\u062d\u0645\u0627\u064a\u0629.\n\nCVE-2024-XXXX (\u062a\u064f\u0643\u062a\u0634\u0641 \u0628\u0627\u0633\u062a\u0645\u0631\u0627\u0631).\n\n\n\n---\n\n\u0643\u064a\u0641 \u062a\u062d\u0645\u064a \u0646\u0641\u0633\u0643\u061f\n\n\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0646\u0638\u0627\u0645 \u0648\u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0628\u0627\u0633\u062a\u0645\u0631\u0627\u0631.\n\n\u062a\u0639\u0637\u064a\u0644 ADB \u0648 Debugging \u0639\u0646\u062f \u0639\u062f\u0645 \u0627\u0644\u062d\u0627\u062c\u0629 \u0625\u0644\u064a\u0647.\n\n\u062a\u062c\u0646\u0628 \u062a\u062d\u0645\u064a\u0644 \u062a\u0637\u0628\u064a\u0642\u0627\u062a APK \u0645\u0646 \u0645\u0635\u0627\u062f\u0631 \u063a\u064a\u0631 \u0645\u0648\u062b\u0648\u0642\u0629.\n\n\u0627\u0633\u062a\u062e\u062f\u0627\u0645 ROMs \u0645\u0639\u062f\u0644\u0629 \u0628\u0645\u064a\u0632\u0627\u062a \u0623\u0645\u0627\u0646 \u0625\u0636\u0627\u0641\u064a\u0629 \u0645\u062b\u0644 GrapheneOS \u0623\u0648 CalyxOS.\n\n\n\u0625\u0630\u0627 \u0643\u0646\u062a \u062a\u0631\u064a\u062f \u062a\u0639\u0644\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u0623\u0648 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631\u060c \u0623\u0646\u0635\u062d\u0643 \u0628\u062f\u0631\u0627\u0633\u0629 \u0647\u0646\u062f\u0633\u0629 \u0639\u0643\u0633\u064a\u0629 (Reverse Engineering) \u0648\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u0644\u062e\u0628\u064a\u062b\u0629 (Malware Analysis).", "url": "https://t.me/DaleelCyberSecurity/80"}, {"timestamp": "2025-02-04T16:00:09Z", "date_only": false, "value": "2025-02-04T16:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Zrldk8z1EwjpYU8Vg3CSH1QFx-z50lEQp2XdvPCkQk6RQ8I", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "9704c193-483f-4150-a74e-d0237bc4ba95", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "21d32145-c4e1-4b27-9f40-4cc7496a9e6f"}, {"timestamp": "2025-02-07T13:04:20.328Z", "date_only": false, "value": "2025-02-07T13:04:20.328785Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-2215", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-07T13:04:20.328Z", "date_only": false, "value": "2025-02-07T13:04:20.328785Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-2215", "record": "FKIE_CVE-2019-2215", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-23T02:09:43Z", "date_only": false, "value": "2025-02-23T02:09:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "bfeffe15-15f7-4f3f-9c3d-564ca44eb487"}, {"timestamp": "2025-02-23T04:10:15Z", "date_only": false, "value": "2025-02-23T04:10:15.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0e4067dd-78a6-4ab0-9262-a4009f6c6cf9"}, {"timestamp": "2025-03-30T12:50:01Z", "date_only": false, "value": "2025-03-30T12:50:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/63BYuvlMwmvtLowrCF3MHX2SuwSGWGBYchele8q3SvC5U-Q", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "a55cd109-2f55-4664-8bc7-dc7c381f0b4d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-18T02:19:21Z", "date_only": false, "value": "2025-04-18T02:19:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/bernielampe1/9e1b0221f50120ee61fc17977dc046bb", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "3935a5ca-6744-4d54-a305-b14fe04e7757", "url": "https://gist.github.com/bernielampe1/9e1b0221f50120ee61fc17977dc046bb"}, {"timestamp": "2025-08-31T03:00:56Z", "date_only": false, "value": "2025-08-31T03:00:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "464024a6-c6cf-4316-b7ec-7dfc0f8f10ca"}, {"timestamp": "2025-10-21T23:45:29.242Z", "date_only": false, "value": "2025-10-21T23:45:29.242Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2019-2215", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:45:29.242Z", "date_only": false, "value": "2025-10-21T23:45:29.242Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-2215", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:49Z", "date_only": false, "value": "2025-10-22T00:31:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M7G6-9CWP-6JGM", "record": "GHSA-M7G6-9CWP-6JGM", "field": "modified", "linked_record": true}, {"timestamp": "2025-11-07T03:00:06Z", "date_only": false, "value": "2025-11-07T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Z22ddpILY-yeUUVWiXwyxi9IfQjGUAfHXsS4qd56wYck-To", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "849e2057-88c7-4447-a934-a874e5327a93", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2019-2215", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "fd98c742-c296-4f75-878c-9671726e5bf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:28:34.488Z", "date_only": false, "value": "2026-02-02T12:28:34.488868Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fd98c742-c296-4f75-878c-9671726e5bf1", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "11f755ad-642b-4202-80ba-3d75bb7dc325", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fd98c742-c296-4f75-878c-9671726e5bf1", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-27T23:02:22Z", "date_only": false, "value": "2026-03-27T23:02:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/prof-hac/76f2a4b0a2937cff2ca4b95dc94a2d2c", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2947ed74-14b3-43da-9a15-63789f9d523e", "url": "https://gist.github.com/prof-hac/76f2a4b0a2937cff2ca4b95dc94a2d2c"}, {"timestamp": "2026-04-22T15:00:07Z", "date_only": false, "value": "2026-04-22T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UcOXFA8nSOttq6tnEv5GYCOJTlyoQN894TbAmd-Usu-nlPU", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "3b4a28db-42d0-4218-b78d-e4416879dab3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T02:33:27.307Z", "date_only": false, "value": "2026-06-17T02:33:27.307", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-2215", "record": "FKIE_CVE-2019-2215", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:47:54.316Z", "date_only": false, "value": "2026-06-19T12:47:54.316715Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0d536931-a304-42ea-9490-0fec386f39af", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "25dd7d7f-5b68-43e5-a661-626200083599", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0d536931-a304-42ea-9490-0fec386f39af", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2019-2215", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "b9d91a31-f5f7-484e-9e9b-bfcb87b6861a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:49.386Z", "date_only": false, "value": "2026-06-23T14:04:49.386341Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b9d91a31-f5f7-484e-9e9b-bfcb87b6861a", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "4b93ed03-e2db-4f2e-95df-ba9ace8b0adc", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b9d91a31-f5f7-484e-9e9b-bfcb87b6861a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-13T15:40:18.533Z", "date_only": false, "value": "2026-07-13T15:40:18.533541Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dretsdigitals.bsky.social/post/3mqjzo6cg6726", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "6a05d5a9-2cd0-4e8e-b8fe-6fa458ca9d1b", "content": "\u00d2bviament avui aix\u00f2 ja no \u00e9s un dia zero, \u00e9s CVE-2019-2215 i \u00e9s coneguda des del 3 d'octubre de 2019 i ja est\u00e0 resolta. Per\u00f2 explica, crec, el que demanava @MiawBot_, per b\u00e9 que \u00e9s nom\u00e9s un cas, de com sense clicar res o instal\u00b7lar res acaba dins el tel\u00e8fon Pegasus.", "url": "https://bsky.app/profile/dretsdigitals.bsky.social/post/3mqjzo6cg6726"}, {"timestamp": "2026-07-16T19:00:26.335Z", "date_only": false, "value": "2026-07-16T19:00:26.335976Z", "kind": "sighting", "label": "Seen", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b1ee2f83-92ea-4d06-99cd-3ea33139ebeb"}, {"timestamp": "2026-07-18T00:00:08.714Z", "date_only": false, "value": "2026-07-18T00:00:08.714261Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c834a1cd-f272-4a99-9d0e-2648f6f46b7d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:00:27.687Z", "date_only": false, "value": "2026-07-29T12:00:27.687912Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13875", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "fd1633d6-5872-460e-bf9a-2001ea30cddc", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2019-2215*\nGithub: https://github.com/elbiazo/CVE-2019-2215", "url": "https://t.me/CVEhub/13875"}, {"timestamp": "2026-07-29T12:01:51.666Z", "date_only": false, "value": "2026-07-29T12:01:51.666651Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-b6NlrJOEw_zJimIAmB4c1D3ncCBS2EwpVRGFVG3RYkxug", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d8d4c76d-0c6c-461e-99f8-3e1c019ae9ee"}, {"timestamp": "2026-07-29T12:01:51.744Z", "date_only": false, "value": "2026-07-29T12:01:51.744163Z", "kind": "sighting", "label": "Seen", "source": "Telegram/0tzsqneLPQcsbkHzmybZ1BW-muV3sI_nhq0plzKZxs2e9w", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "58141c22-3560-4a7b-90bb-77db4a0ee355"}, {"timestamp": "2026-07-29T12:01:51.780Z", "date_only": false, "value": "2026-07-29T12:01:51.780487Z", "kind": "sighting", "label": "Seen", "source": "Telegram/pcZuxYaCj876A99MH88og5kILjRCZFWLKNXkMlxnBvaTIQ", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b4003674-1959-4d92-8b7c-7bb25ed94743"}, {"timestamp": "2026-07-29T12:01:51.818Z", "date_only": false, "value": "2026-07-29T12:01:51.818501Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7A159i0HACT4Drsy_6fG96JlPj6F-S9nuRggGWrJ5pf22Q", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "5212ec6e-9658-4f72-adea-5ebb1de8d6b2"}, {"timestamp": "2026-07-29T12:01:51.863Z", "date_only": false, "value": "2026-07-29T12:01:51.863318Z", "kind": "sighting", "label": "Seen", "source": "Telegram/OiwVIyW_JjHaUCKYuOHkhUVJpeH8qfWqqyhRANHbaFZOSg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "890fcdde-9698-4245-9c58-131817efbd83"}, {"timestamp": "2026-07-29T12:01:51.908Z", "date_only": false, "value": "2026-07-29T12:01:51.908240Z", "kind": "sighting", "label": "Seen", "source": "Telegram/sNnj3eUSfcnX912-SMrE3_4KpfDf4yGIruDYN0OwGBLAUg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b68a0bfc-2629-4d75-8b26-ae9de9a058b0"}, {"timestamp": "2026-07-29T12:01:51.955Z", "date_only": false, "value": "2026-07-29T12:01:51.955840Z", "kind": "sighting", "label": "Seen", "source": "Telegram/5G2OhRr6Ae4asZCGTWDljIKNsiqC2xI2fkug87oPNSBQSQ", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "8c08457e-19be-4c6a-92e1-57ed0e95d849"}, {"timestamp": "2026-07-29T12:01:52.006Z", "date_only": false, "value": "2026-07-29T12:01:52.006121Z", "kind": "sighting", "label": "Seen", "source": "Telegram/i45cnCXhxEBiS9_rafy4gdo1inNIRU43ixs1ol6DRa1GUg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "652b26f6-3976-4f86-a576-fca8baf00357"}, {"timestamp": "2026-07-29T12:01:52.051Z", "date_only": false, "value": "2026-07-29T12:01:52.051912Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AYMZkvCYLPEzR6D6Q8GOStQMo3Jq2Z-lMrQ2PjeKRjKnzw", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "34206150-a0d4-4521-8189-7f582d86179c"}, {"timestamp": "2026-07-29T12:01:52.095Z", "date_only": false, "value": "2026-07-29T12:01:52.095684Z", "kind": "sighting", "label": "Seen", "source": "Telegram/GLzhBsjYNgS3LSDZc3rIHHZlH6Nj6wVS6BCAEIrMViD3Qg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f939d0a4-89c6-4405-b780-c07a7f4eb5b7"}, {"timestamp": "2026-07-29T12:01:54.423Z", "date_only": false, "value": "2026-07-29T12:01:54.423261Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/certkznews/641", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0ba0b5b9-87c4-4b45-809d-8583d39eebcc", "content": "RnD \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0426\u0410\u0420\u041a\u0410, \u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u044f\u0445, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0432 \u0432\u0438\u0434\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android \u2013 CVE-2019-2215 Android Bad Binder Use-After-Free [1]. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 (root) \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0435 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u0434 \u043b\u044e\u0431\u044b\u043c \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u044e\u0437\u0435\u0440\u043e\u043c. \u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Google Project Zero (Maddie Stone) 27 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2019 \u0433\u043e\u0434\u0430 [2]. \n\n\u0414\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u043e\u044f\u0441\u043d\u0438\u043c, \u0430\u043d\u0430\u043b\u043e\u0433 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u043a\u0430\u043a \u043a\u0438\u0431\u0435\u0440\u043e\u0440\u0443\u0436\u0438\u0435, \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c, \u0441 2017 \u0433\u043e\u0434\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android, \u041d\u041e \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043d\u0435 \u0432\u044b\u0439\u0434\u0435\u0442, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u0435\u0440\u0438\u043e\u0434 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0443\u0436\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0447\u0435\u043d\u044c \u0440\u0435\u0434\u043a\u043e \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0432\u0432\u0438\u0434\u0443 \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u0435\u0444\u0438\u0446\u0438\u0442\u0430 \u043a\u043e\u043c\u043f\u0435\u0442\u0435\u043d\u0446\u0438\u0438. \u041c\u044b \u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0434 \u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0443 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u043b\u044b \u0432 \u0442\u0430\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435 \u043a\u0430\u043a \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Android \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0446\u0435\u043d\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430. \u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u0430\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0430 \u043f\u0440\u0438\u0440\u043e\u0434\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android.\n\n\u041d\u0430\u0448\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0443\u0436\u0435 \u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u043c\u0438 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0437\u043d\u0430\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 \u0432\u0441\u0442\u0440\u0435\u0447\u0435 \u00abR0 crew KZ\u00bb (https://t.me/r0crewKZ) \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2019 \u0433\u043e\u0434\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043e\u0431\u0443\u0447\u0430\u044e\u0449\u0438\u0439 \u0441\u0442\u0440\u0438\u043c [3].\n\n\u0412 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0440\u0430\u0437\u043d\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0434\u043b\u044f \u043a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u044d\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u043e\u043f\u044b\u0442. \u042d\u0442\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u043c\u044b \u0440\u0435\u0448\u0430\u043b\u0438 \u0437\u0430\u0434\u0430\u0447\u0443 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u043f\u043e\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435\u0442 \u0433\u043e\u0442\u043e\u0432\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043c\u044b \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0432\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u2013 Xiaomi Redmi 5 \u0438 Samsung A520F (Galaxy A5).\n\n\u041d\u0430 \u0432\u0438\u0434\u0435\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u0438\u0434\u0435\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u0435\u043c \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0440\u044f\u0434\u0430 \u0431\u0430\u0442\u0430\u0440\u0435\u0438 \u043d\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 1 000 000 %.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435, \u0432 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0437\u043d\u0430\u043d\u0438\u044f \u043e \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0435 \u0430\u0442\u0430\u043a, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0442 \u043d\u0430\u043c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0435\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0426\u0410\u0420\u041a\u0410 \u043f\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b BULAQ, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439 \u0432 \u0441\u0435\u0431\u044f \u0446\u0435\u043b\u0443\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u041e\u0434\u043d\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u2013 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d.\n\n[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2215\n[2] https://bugs.chromium.org/p/project-zero/issues/detail?id=1942\n[3] https://youtu.be/iu6xPThoHZ8?t=2459, https://youtu.be/RT7BjSACrv0?t=33", "url": "https://t.me/certkznews/641"}, {"timestamp": "2026-07-29T12:02:34.924Z", "date_only": false, "value": "2026-07-29T12:02:34.924433Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2997", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "54499004-a170-4f74-8785-a91b324737b0", "content": "exploiting CVE-2019-2215 https://cutesmilee.github.io/kernel/linux/android/2022/02/17/cve-2019-2215_writeup.html", "url": "https://t.me/reverseame/2997"}, {"timestamp": "2026-07-29T12:02:45.270Z", "date_only": false, "value": "2026-07-29T12:02:45.270479Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2130", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c6bb6523-239c-4c97-9d62-f297b233b12b", "content": "Exploiting CVE-2019-2215 https://cutesmilee.github.io/kernel/linux/android/2022/02/17/cve-2019-2215_writeup.html", "url": "https://t.me/reverseame/2130"}, {"timestamp": "2026-07-31T00:00:24.694Z", "date_only": false, "value": "2026-07-31T00:00:24.694253Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/13875", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d83a5d95-6b70-4895-968d-519a16461450", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2019-2215*\nGithub: https://github.com/elbiazo/CVE-2019-2215", "url": "https://t.me/CVEhub/13875", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-01T16:00:04.835Z", "date_only": false, "value": "2026-08-01T16:00:04.835120Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5G2OhRr6Ae4asZCGTWDljIKNsiqC2xI2fkug87oPNSBQSQ", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "3e39a7a1-ac80-404f-9107-fc5e0a8a1f69", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-01T16:00:05.059Z", "date_only": false, "value": "2026-08-01T16:00:05.059240Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0tzsqneLPQcsbkHzmybZ1BW-muV3sI_nhq0plzKZxs2e9w", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "e714710e-b3ae-4f7f-87dc-c09a67214563", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-01T19:00:04.160Z", "date_only": false, "value": "2026-08-01T19:00:04.160852Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/certkznews/641", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "acdfd4fa-7abb-4bdc-bd28-f823d2821ab4", "content": "RnD \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0426\u0410\u0420\u041a\u0410, \u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u044f\u0445, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0432 \u0432\u0438\u0434\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android \u2013 CVE-2019-2215 Android Bad Binder Use-After-Free [1]. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 (root) \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0435 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u0434 \u043b\u044e\u0431\u044b\u043c \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u044e\u0437\u0435\u0440\u043e\u043c. \u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Google Project Zero (Maddie Stone) 27 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2019 \u0433\u043e\u0434\u0430 [2]. \n\n\u0414\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u043e\u044f\u0441\u043d\u0438\u043c, \u0430\u043d\u0430\u043b\u043e\u0433 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u043a\u0430\u043a \u043a\u0438\u0431\u0435\u0440\u043e\u0440\u0443\u0436\u0438\u0435, \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c, \u0441 2017 \u0433\u043e\u0434\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android, \u041d\u041e \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043d\u0435 \u0432\u044b\u0439\u0434\u0435\u0442, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u0435\u0440\u0438\u043e\u0434 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0443\u0436\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0447\u0435\u043d\u044c \u0440\u0435\u0434\u043a\u043e \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0432\u0432\u0438\u0434\u0443 \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u0435\u0444\u0438\u0446\u0438\u0442\u0430 \u043a\u043e\u043c\u043f\u0435\u0442\u0435\u043d\u0446\u0438\u0438. \u041c\u044b \u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0434 \u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0443 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u043b\u044b \u0432 \u0442\u0430\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435 \u043a\u0430\u043a \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Android \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0446\u0435\u043d\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430. \u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u0430\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0430 \u043f\u0440\u0438\u0440\u043e\u0434\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android.\n\n\u041d\u0430\u0448\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0443\u0436\u0435 \u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u043c\u0438 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0437\u043d\u0430\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 \u0432\u0441\u0442\u0440\u0435\u0447\u0435 \u00abR0 crew KZ\u00bb (https://t.me/r0crewKZ) \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2019 \u0433\u043e\u0434\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043e\u0431\u0443\u0447\u0430\u044e\u0449\u0438\u0439 \u0441\u0442\u0440\u0438\u043c [3].\n\n\u0412 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0440\u0430\u0437\u043d\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0434\u043b\u044f \u043a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u044d\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u043e\u043f\u044b\u0442. \u042d\u0442\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u043c\u044b \u0440\u0435\u0448\u0430\u043b\u0438 \u0437\u0430\u0434\u0430\u0447\u0443 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u043f\u043e\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435\u0442 \u0433\u043e\u0442\u043e\u0432\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043c\u044b \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0432\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u2013 Xiaomi Redmi 5 \u0438 Samsung A520F (Galaxy A5).\n\n\u041d\u0430 \u0432\u0438\u0434\u0435\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u0438\u0434\u0435\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u0435\u043c \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0440\u044f\u0434\u0430 \u0431\u0430\u0442\u0430\u0440\u0435\u0438 \u043d\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 1 000 000 %.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435, \u0432 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0437\u043d\u0430\u043d\u0438\u044f \u043e \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0435 \u0430\u0442\u0430\u043a, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0442 \u043d\u0430\u043c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0435\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0426\u0410\u0420\u041a\u0410 \u043f\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b BULAQ, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439 \u0432 \u0441\u0435\u0431\u044f \u0446\u0435\u043b\u0443\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u041e\u0434\u043d\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u2013 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d.\n\n[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2215\n[2] https://bugs.chromium.org/p/project-zero/issues/detail?id=1942\n[3] https://youtu.be/iu6xPThoHZ8?t=2459, https://youtu.be/RT7BjSACrv0?t=33", "url": "https://t.me/certkznews/641", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-02T21:14:36.227Z", "date_only": false, "value": "2026-08-02T21:14:36.227087Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2997", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "fb1f90a3-e5fa-44b7-ad95-903b5bb6b047", "content": "exploiting CVE-2019-2215 https://cutesmilee.github.io/kernel/linux/android/2022/02/17/cve-2019-2215_writeup.html", "url": "https://t.me/reverseame/2997", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-03T02:13:40.310Z", "date_only": false, "value": "2026-08-03T02:13:40.310085Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2130", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "ad50aadf-3c1b-4d32-abbe-e8d3dce87600", "content": "Exploiting CVE-2019-2215 https://cutesmilee.github.io/kernel/linux/android/2022/02/17/cve-2019-2215_writeup.html", "url": "https://t.me/reverseame/2130", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-03T18:50:48.018Z", "date_only": false, "value": "2026-08-03T18:50:48.018207Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/KRW0090/166c655e59c71f63be65acf67641b33d", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "77fa0056-4c6b-4394-98b6-52d9b1537961", "content": "# SH-03M (docomo\u30ad\u30c3\u30ba\u30b1\u30fc\u30bf\u30a4) Root\u5316\u8abf\u67fb\u30ce\u30fc\u30c8\n\n> \u672c\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306f\u3001NTT docomo\u306e\u30ad\u30c3\u30ba\u30b1\u30fc\u30bf\u30a4 **SH-03M**\uff08\u30b7\u30e3\u30fc\u30d7\u88fd / Snapdragon 210 / MSM8909\uff09\u306e root \u53d6\u5f97\u3092\u8a66\u307f\u305f\u8abf\u67fb\u306e\u5168\u8a18\u9332\u3067\u3059\u3002\n> \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u30fb\u6559\u80b2\u76ee\u7684\u3067\u4f5c\u6210\u3057\u307e\u3057\u305f\u3002\u8a18\u8f09\u5185\u5bb9\u3092\u5b9f\u6a5f\u3067\u518d\u73fe\u3059\u308b\u969b\u306f\u81ea\u5df1\u8cac\u4efb\u3067\u304a\u9858\u3044\u3057\u307e\u3059\u3002\n\n## \u514d\u8cac\u4e8b\u9805\n\n- \u672c\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306f\u8abf\u67fb\u8a18\u9332\u3067\u3042\u308a\u3001root\u5316\u306e\u300c\u6210\u529f\u624b\u9806\u300d\u3067\u306f\u3042\u308a\u307e\u305b\u3093\uff08\u73fe\u6642\u70b9\u3067 root \u53d6\u5f97\u306b\u306f\u81f3\u3063\u3066\u3044\u307e\u305b\u3093\uff09\u3002\n- \u8a18\u8f09\u306e\u64cd\u4f5c\u306f\u7aef\u672b\u3092\u7834\u640d\u30fb\u6587\u93ae\u5316\u3055\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u5b9f\u65bd\u306f\u81ea\u5df1\u8cac\u4efb\u3067\u3059\u3002\n- eSIM \u3092\u5229\u7528\u3057\u3066\u3044\u308b\u7aef\u672b\u3067\u306f\u3001\u30ea\u30ab\u30d0\u30ea\u30fc\u30e2\u30fc\u30c9\u304b\u3089\u306e\u521d\u671f\u5316\u306b\u3088\u308a eSIM \u60c5\u5831\u304c\u5931\u308f\u308c\u3001\u518d\u767a\u884c\u304c\u5fc5\u8981\u306b\u306a\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002\n\n---\n\n## 1. \u7aef\u672b\u6982\u8981\n\n| \u9805\u76ee | \u5024 |\n|---|---|\n| \u578b\u756a | SH-03M\uff08docomo \u30ad\u30c3\u30ba\u30b1\u30fc\u30bf\u30a4\uff09 |\n| SoC | Qualcomm Snapdragon 210 / 212\uff08**MSM8909**, 32bit ARM\uff09 |\n| GPU | Adreno 304\uff08KGSL \u30c9\u30e9\u30a4\u30d0\uff09 |\n| RAM | 889 MB\uff08\u5b9f\u6e2c\uff09 |\n| ROM | 8 GB eMMC |\n| Android | 8.1.0 (SDK 27, OPM1.171019.026) |\n| \u30ab\u30fc\u30cd\u30eb | Linux 3.18.71-perf\uff082023\u301c2025 \u5e74\u518d\u30d3\u30eb\u30c9\uff09 |\n| \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1 | 2019-08-01 |\n| \u30ea\u30ea\u30fc\u30b9 | 2020-01-17 |\n\n### \u30d5\u30a1\u30fc\u30e0\u30a6\u30a7\u30a2\uff08\u78ba\u8a8d\u3057\u305f4\u53f0\u306e\u5b9f\u6a5f\uff09\n\n| \u30b7\u30ea\u30a2\u30eb\u672b\u5c3e | \u30d3\u30eb\u30c9 | \u30d3\u30eb\u30c9\u65e5 | \u5099\u8003 |\n|---|---|---|---|\n| 2C0503416 | 00WW_2_240 | 2025-05-29 | 1\u53f0\u76ee |\n| C140100594 | 00WW_2_230 | 2025-01-20 | 2\u53f0\u76ee |\n| C1302866 | 00WW_2_220 | 2023-03-23 | 3\u53f0\u76ee\uff08\u30ea\u30ab\u30d0\u30ea\u30fc\u3067\u521d\u671f\u5316\uff09 |\n| C110401206 | 00WW_2_220 | 2023-03-23 | 4\u53f0\u76ee |\n\n\u3059\u3079\u3066\u306e\u30d5\u30a1\u30fc\u30e0\u306f `ro.build.user=cm`, `ro.build.host=cm-build-40-18`, `ro.build.flavor=OE6_00WW_FIH-user` \u3067\u3001**\u500b\u4eba/\u5de5\u5834\u304c\u30d3\u30eb\u30c9\u3057\u305f\u30ab\u30b9\u30bf\u30e0ROM** \u3068\u63a8\u5b9a\u3055\u308c\u308b\u3002\n\n### \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u72b6\u614b\n\n```\nro.build.type=user\nro.debuggable=0\nro.secure=1\nro.adb.secure=1\nro.boot.flash.locked=1\nro.boot.verifiedbootstate=green\nro.boot.veritymode=enforcing\nro.boot.securityfused=true\nro.oem_unlock_supported=true  (\u3060\u304c unlock \u4e0d\u53ef)\nselinux=Enforcing\n/data = f2fs + dm-crypt\n```\n\n---\n\n## 2. \u8a66\u884c\u3057\u305f\u30eb\u30fc\u30c8\u3068\u7d50\u679c\u30b5\u30de\u30ea\n\n| # | \u30eb\u30fc\u30c8 | \u7d50\u679c | \u8a73\u7d30 |\n|---|---|---|---|\n| 1 | \u30d6\u30fc\u30c8\u30ed\u30fc\u30c0\u30fc\u30a2\u30f3\u30ed\u30c3\u30af (fastboot oem) | **\u4e0d\u53ef** | `oem unlock` \u304c `oem unlock is not allowed`\u3002`flashing get_unlock_ability` = 0 |\n| 2 | EDL (9008) + firehose \u66f8\u304d\u8fbc\u307f | **\u4e0d\u53ef** | \u7f72\u540d\u4ed8\u304d firehose \u304c\u5b58\u5728\u3057\u306a\u3044\uff08PK_HASH \u4e0d\u4e00\u81f4\uff09 |\n| 3 | \u65e2\u77e5\u30ab\u30fc\u30cd\u30eb CVE (binder\u7cfb) | **\u4fee\u6b63\u6e08\u307f** | CVE-2019-2215 / 2020-0041 / 2020-0423 \u306f\u30b7\u30e3\u30fc\u30d7\u30bd\u30fc\u30b9\u3067\u4fee\u6b63\u78ba\u8a8d |\n| 4 | kgsl SVM \u8106\u5f31\u6027 (11261/33107) | **32bit\u3067\u306f\u4e0d\u53ef** | 64bit\u524d\u63d0\u306e\u30e9\u30c3\u30d7\u30a2\u30e9\u30a6\u30f3\u30c9\u624b\u6cd5\u304c32bit\u3067\u6570\u5b66\u7684\u306b\u6210\u7acb\u3057\u306a\u3044 |\n| 5 | kgsl dmabuf UAF (11239) | **\u975e\u8a72\u5f53** | kernel 3.18 \u306f\u65b0 ION ABI (4.12+) \u3067\u306f\u306a\u304f\u975e\u8a72\u5f53 |\n| 6 | \u30b7\u30b9\u30c6\u30e0\u30a2\u30d7\u30ea\u6a29\u9650\u6607\u683c | **\u4e0d\u53ef** | \u5f37\u6a29\u9650\u306f signature \u4fdd\u8b77\u3002\u7121\u4fdd\u8b77 Provider \u306f\u4f4e\u5f71\u97ff\u306e\u307f |\n| 7 | \u30ab\u30fc\u30cd\u30eb\u30e2\u30b8\u30e5\u30fc\u30eb\u30ed\u30fc\u30c9 | **\u4e0d\u53ef** | `insmod` \u304c\u975eroot\u3067\u62d2\u5426 |\n| 8 | adb root | **\u4e0d\u53ef** | production builds |\n| 9 | \u30ea\u30ab\u30d0\u30ea\u30fc\u30e2\u30fc\u30c9\u521d\u671f\u5316 | **\u6210\u529f** | \u4fdd\u8b77\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u89e3\u9664\u306b\u306f\u6709\u52b9\uff08root\u5316\u3068\u306f\u7121\u95a2\u4fc2\uff09 |\n\n---\n\n## 3. \u30d6\u30fc\u30c8\u30ed\u30fc\u30c0\u30fc\u89e3\u6790\n\n### 3.1 Download mode\uff08fastboot \u30d7\u30ed\u30c8\u30b3\u30eb\uff09\n\n`adb reboot bootloader` \u3067\u5165\u308b\u30e2\u30fc\u30c9\u3002USB \u306f `0489:C009` \u3068\u3057\u3066\u8a8d\u8b58\u3055\u308c\u308b\u3002\n\n- \u6a19\u6e96 fastboot \u5b9f\u88c5\uff08\u9577\u3055\u30d7\u30ec\u30d5\u30a3\u30c3\u30af\u30b9\u7121\u3057\u306e\u751f\u30b3\u30de\u30f3\u30c9\uff09\u3067\u5fdc\u7b54\u3059\u308b\n- `getvar:all` \u304c\u52d5\u4f5c\u3057\u3001\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u60c5\u5831\u30fbunlock \u72b6\u614b\u3092\u8fd4\u3059\n- Google \u6a19\u6e96\u306e `fastboot.exe` \u306f VID 0489 \u3092\u8a8d\u8b58\u3057\u306a\u3044\u305f\u3081\u3001libusb \u7d4c\u7531\u306e\u81ea\u4f5c\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3067\u30a2\u30af\u30bb\u30b9\n\n**\u4e3b\u306a getvar \u7d50\u679c:**\n\n```\nversion: 0.5\nunlocked: no\nsecure: yes\nvariant: OE6 eMMC\nkernel: lk\nproduct: MSM8909\n```\n\n### 3.2 OEM \u30b3\u30de\u30f3\u30c9\n\n\u8a8d\u8b58\u3055\u308c\u308b\u30b3\u30de\u30f3\u30c9\uff08\u4e00\u90e8\uff09:\n\n| \u30b3\u30de\u30f3\u30c9 | \u7d50\u679c |\n|---|---|\n| `oem device-info` | `Device unlocked: false, tampered: false, critical unlocked: false` |\n| `oem lock-state info` | `Device already : locked!` |\n| `oem unlock-go` / `oem unlock` | `oem unlock is not allowed` |\n| `flashing get_unlock_ability` | `get_unlock_ability: 0` |\n| `oem off-mode-charge 0` | OKAY\uff08\u66f8\u304d\u8fbc\u307f\u7cfb\u306f\u4e00\u90e8\u52d5\u4f5c\uff09 |\n\n**\u7d50\u8ad6:** docomo \u7aef\u672b\u306e\u8a2d\u8a08\u3069\u304a\u308a\u3001`get_unlock_ability=0` \u3067\u3042\u308a\u516c\u5f0f\u30a2\u30f3\u30ed\u30c3\u30af\u4e0d\u53ef\u3002devinfo \u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u306e `unlock_ability` \u66f8\u304d\u63db\u3048\u306b\u306f root \u304c\u5fc5\u8981\uff08\u5faa\u74b0\uff09\u3002\n\n### 3.3 EDL (9008) \u30e2\u30fc\u30c9\n\n`adb reboot edl` \u3067 **\u771f\u306e Qualcomm 9008 EDL** \u306b\u5165\u308c\u308b\u3053\u3068\u3092\u78ba\u8a8d\uff08\u30b3\u30df\u30e5\u30cb\u30c6\u30a3\u5831\u544a\u3068\u7570\u306a\u308b\u91cd\u8981\u306a\u767a\u898b\uff09\u3002\n\n- USB: `05C6:9008`\n- Sahara \u30cf\u30f3\u30c9\u30b7\u30a7\u30a4\u30af\u6210\u529f\uff08HWID / PK_HASH / \u30b7\u30ea\u30a2\u30eb\u53d6\u5f97\u53ef\uff09\n\n**\u53d6\u5f97\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u60c5\u5831:**\n\n```\nHWID:     0x0096e10000380000 (MSM8909, OEM=0x3800=Sharp)\nPK_HASH:  0eed6924 362cf06a 1ce75b3c 57aabca4 360f7eb5 0dc6d59b ddfc4117 e6cff0ad\nSerial:   0x234c46e0\n```\n\n**firehose \u63a2\u7d22\u7d50\u679c:**\n- bkerler/edl \u306e `root_cert_hash` \u306b `0eed6924` \u306f\u542b\u307e\u308c\u305a\uff08fused \u30c7\u30d0\u30a4\u30b9\u78ba\u5b9a\uff09\n- temblast \u306e\u5168\u30b3\u30ec\u30af\u30b7\u30e7\u30f3\uff082000+\uff09\u306b\u3082 `0eed6924` \u7f72\u540d\u306e\u30ed\u30fc\u30c0\u30fc\u306f\u5b58\u5728\u3057\u306a\u3044\n- \u6c4e\u7528 MSM8909 \u30ed\u30fc\u30c0\u30fc\uff08SecTools \u30c6\u30b9\u30c8\u7f72\u540d\uff09\u306f\u7f72\u540d\u691c\u8a3c\u3067\u62d2\u5426\n\n**\u7d50\u8ad6:** \u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8\u6709\u52b9 + \u5c02\u7528\u7f72\u540d\u9375\u306e firehose \u304c\u975e\u516c\u958b\u306e\u305f\u3081\u3001EDL \u66f8\u304d\u8fbc\u307f\u306f\u4e0d\u53ef\u80fd\u3002\n\n---\n\n## 4. \u30ab\u30fc\u30cd\u30eb CVE \u8abf\u67fb\n\n\u30b7\u30e3\u30fc\u30d7\u516c\u5f0f OSS \u30bd\u30fc\u30b9\uff08V1.350 / V2.110\uff09\u3068\u5b9f\u6a5f\u30ab\u30fc\u30cd\u30eb\u3092\u7167\u5408\u3002\n\n### 4.1 binder \u7cfb\uff08\u5168\u3066\u4fee\u6b63\u6e08\u307f\uff09\n\n| CVE | \u5185\u5bb9 | \u30b7\u30e3\u30fc\u30d7\u30bd\u30fc\u30b9\u3067\u306e\u4fee\u6b63 |\n|---|---|---|\n| CVE-2019-2215 | binder UAF (POLLFREE) | V1.350 \u304b\u3089 `wake_up_poll(&thread->wait, POLLHUP \\| POLLFREE)` \u3042\u308a |\n| CVE-2020-0041 | binder OOB write | `off_start = ALIGN(tr->data_size, ...)` \u3042\u308a |\n| CVE-2020-0423 | binder UAF (\u30ec\u30fc\u30b9) | `binder_dequeue_work_head_ilocked` \u4f7f\u7528\u3067\u4fee\u6b63 |\n\n### 4.2 kgsl\uff08GPU\uff09\u7cfb\n\n| CVE | \u5185\u5bb9 | \u672c\u7aef\u672b\u3067\u306e\u8a55\u4fa1 |\n|---|---|---|\n| CVE-2020-11261 | SVM \u9818\u57df\u306e\u7bc4\u56f2\u30c1\u30a7\u30c3\u30af\u4e0d\u5099 | \u30bd\u30fc\u30b9\u4e0a\u306f\u672a\u4fee\u6b63\u3060\u304c\u3001**32bit \u3067\u306f global range (0xf8000000) \u306b\u30e6\u30fc\u30b6\u30fc\u304c\u5230\u9054\u4e0d\u53ef**\u306e\u305f\u3081\u5b9f\u7528\u4e0d\u53ef |\n| CVE-2023-33107 | gpuobj_import \u6574\u6570\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc | \u30bd\u30fc\u30b9\u4e0a\u306f\u672a\u4fee\u6b63\u3060\u304c\u3001**32bit size_t \u3067\u306f\u30e9\u30c3\u30d7\u304c\u6570\u5b66\u7684\u306b\u4e0d\u53ef\u80fd** |\n| CVE-2020-11239 | dmabuf import UAF | **kernel 3.18 \u306f\u65b0 ION ABI (4.12+) \u975e\u8a72\u5f53** |\n\n### 4.3 \u5b9f\u6a5f\u3067\u306e kgsl \u52d5\u4f5c\u78ba\u8a8d\n\n`/dev/kgsl-3d0` \u306f **rw-rw-rw-**\uff08\u5168\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u3001\u901a\u5e38\u306e Android \u3067\u306f\u7570\u4f8b\uff09\u3002\n\nNDK (r21e) \u3067 ARM32 \u30af\u30ed\u30b9\u30b3\u30f3\u30d1\u30a4\u30eb\u3057\u305f\u81ea\u4f5c\u30d7\u30ed\u30fc\u30d6\u3067\u78ba\u8a8d:\n\n```\nKGSL_PROP_VERSION: drv=3.14 dev=3.1\nKGSL_PROP_DEVICE_INFO: chip_id=0x3000400 (Adreno 304)\n```\n\n- `IOCTL_KGSL_GPUOBJ_IMPORT` (KGSL_USER_MEM_TYPE_ADDR + USE_CPU_MAP) \u306f\u6210\u529f \u2192 SVM \u633f\u5165\u304c\u52d5\u4f5c\n- `TASK_SIZE = 0xC0000000` \u3067\u3001global range \u306b\u306f\u30e6\u30fc\u30b6\u30fc\u304c mmap \u4e0d\u53ef\n- \u5de8\u5927\u30b5\u30a4\u30ba\u306f `memdesc_sg_virt` \u306e\u5272\u308a\u5f53\u3066\u3067 ENOMEM\n\n---\n\n## 5. \u30b7\u30b9\u30c6\u30e0\u30a2\u30d7\u30ea\u89e3\u6790\n\ndocomo OSV (FOTA) \u30a2\u30d7\u30ea\u3092\u542b\u3080\u5168 priv-app \u3092\u53d6\u5f97\u3057\u3001jadx / baksmali \u3067\u89e3\u6790\u3002\n\n### 5.1 \u30d1\u30fc\u30df\u30c3\u30b7\u30e7\u30f3\u4fdd\u8b77\u30ec\u30d9\u30eb\n\n| \u30d1\u30fc\u30df\u30c3\u30b7\u30e7\u30f3 | \u4fdd\u8b77\u30ec\u30d9\u30eb |\n|---|---|\n| FOTA_REBOOT | signature |\n| OSV_REGISTRY | signature |\n| ACCESS_CONTENT_PROVIDER | signatureOrSystem |\n| RECV_PARENT_APP_EDITING_MSG | signature / signatureOrSystem |\n| KIDS_COMMON_PHRASE | signature |\n\n**\u5f37\u6a29\u9650\u306f\u5168\u3066\u7f72\u540d\u4fdd\u8b77**\u3055\u308c\u3066\u304a\u308a\u3001\u5916\u90e8\u30a2\u30d7\u30ea\u304b\u3089\u306e\u596a\u53d6\u306f\u4e0d\u53ef\u3002\n\n### 5.2 \u7121\u4fdd\u8b77\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\n\n- `KidsHome` \u306e `ClockSettingProvider`\uff08authorities: jp.co.sharp.android.kids.kidshome.setting\uff09\u2014 exported, \u7121\u4fdd\u8b77\n- `schedule` \u306e `WidgetProvider` \u2014 exported, \u7121\u4fdd\u8b77\n\n\u3044\u305a\u308c\u3082\u6642\u8a08/\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb\u8a2d\u5b9a\u306e\u307f\u3067\u3001\u6a29\u9650\u6607\u683c\u306b\u306f\u4f7f\u3048\u306a\u3044\u3002\n\n### 5.3 docomo OSV \u30a2\u30d7\u30ea\n\n- DEX \u7121\u3057\u3001\u30cd\u30a4\u30c6\u30a3\u30d6 OMA-DM \u30a8\u30f3\u30b8\u30f3\uff08`libdmclientengine.so`\u3001\u5bcc\u58eb\u901a\u7cfb\uff09\n- FOTA \u306f\u8a8d\u8a3c\u4ed8\u304d\u30fb\u6697\u53f7\u5316\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\n- \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306f\u5dee\u5206 OTA \u3067\u3042\u308a\u3001firehose (EDL programmer) \u306f\u542b\u307e\u308c\u306a\u3044\n- **FOTA \u304b\u3089\u306e root \u5316\u6750\u6599\u53d6\u5f97\u306f\u4e0d\u53ef**\n\n---\n\n## 6. \u5b9f\u6a5f\u3067\u4f7f\u3048\u308b\u30c4\u30fc\u30eb\u30fb\u60c5\u5831\n\n### 6.1 fastboot \u81ea\u4f5c\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\uff08libusb\uff09\n\nSH-03M \u306e Download mode (`0489:C009`) \u306f Google fastboot \u304c\u8a8d\u8b58\u3057\u306a\u3044\u305f\u3081\u3001Python + libusb \u3067\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3002\n\n```python\nimport usb.core, usb.util\nfrom usb.backend import libusb1\nbackend = libusb1.get_backend(find_library=lambda x: \"libusb-1.0.dll\")\ndev = usb.core.find(idVendor=0x0489, idProduct=0xC009, backend=backend)\n# \u751f\u30b3\u30de\u30f3\u30c9\u9001\u4fe1\uff08getvar/oem \u306f\u9577\u3055\u30d7\u30ec\u30d5\u30a3\u30c3\u30af\u30b9\u7121\u3057\uff09\n```\n\n### 6.2 EDL (9008) \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\n\nbkerler/edl \u304c\u305d\u306e\u307e\u307e\u4f7f\u3048\u308b\u3002Sahara \u30cf\u30f3\u30c9\u30b7\u30a7\u30a4\u30af\u3067 HWID/PK_HASH \u3092\u53d6\u5f97\u53ef\u80fd\u3002\n\n```\npython edl.py --debugmode printgpt\n```\n\n\uff08firehose \u304c\u7121\u3044\u305f\u3081\u3001\u5148\u3078\u306f\u9032\u3081\u306a\u3044\uff09\n\n### 6.3 \u30ea\u30ab\u30d0\u30ea\u30fc\u30e2\u30fc\u30c9\uff08\u4fdd\u8b77\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u89e3\u9664\uff09\n\n1. **\u96fb\u6e90\u30dc\u30bf\u30f3\uff08\u4e0a\u90e8\uff09** \u3068 **\u30de\u30ca\u30fc\u30ad\u30fc\uff08\u53f3\u5074\uff09** \u3092\u540c\u6642\u306b10\u79d2\u4ee5\u4e0a\u9577\u62bc\u3057\n2. docomo \u30ed\u30b4\u8868\u793a\u3067\u96fb\u6e90\u30dc\u30bf\u30f3\u304b\u3089\u6307\u3092\u96e2\u3059\n3. 1\u56de\u632f\u52d5\u5f8c\u3001\u30de\u30ca\u30fc\u30ad\u30fc\u3092\u62bc\u3057\u305f\u307e\u307e\u96fb\u6e90\u30dc\u30bf\u30f3\u3092\u7d20\u65e9\u304f3\u56de\u62bc\u3059\n4. \u30ea\u30ab\u30d0\u30ea\u30fc\u30e1\u30cb\u30e5\u30fc\u8868\u793a \u2192 \u300cWipe data/factory reset\u300d\u2192\u300cFactory Reset\u300d\u2192\u300cOK\u300d\n\n\u203b \u5168\u30c7\u30fc\u30bf\uff08eSIM \u542b\u3080\uff09\u304c\u6d88\u3048\u308b\u3002\u4fdd\u8b77\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u4e0d\u660e\u306e\u7aef\u672b\u306e\u521d\u671f\u5316\u306b\u6709\u52b9\u3002\n\n---\n\n## 7. Fuzzing\uff08\u9032\u884c\u4e2d\uff09\n\n\u672a\u516c\u958b\u8106\u5f31\u6027\u306e\u63a2\u7d22\u3068\u3057\u3066\u3001\u4ee5\u4e0b\u3092\u8a08\u753b\u30fb\u5b9f\u884c\u4e2d\u3002\n\n### 7.1 \u5bfe\u8c61\u30c9\u30e9\u30a4\u30d0\n\n| \u30c7\u30d0\u30a4\u30b9 | \u30d1\u30fc\u30df\u30c3\u30b7\u30e7\u30f3 | \u512a\u5148\u5ea6 |\n|---|---|---|\n| `/dev/kgsl-3d0` | rw-rw-rw-\uff08\u5168\u30a2\u30af\u30bb\u30b9\u53ef\uff09 | \u2605\u2605\u2605 |\n| `/dev/binder` | rw-rw-rw- | \u2605\u2605 |\n| `/dev/diag` | system:fota \u6240\u6709 | \u2605\uff08\u8981\u6a29\u9650\u78ba\u8a8d\uff09 |\n| `/dev/ion` | rw-rw-r-- | \u2605 |\n\n### 7.2 \u65b9\u91dd\n\n- kernel 3.18 / 32bit ARM \u5411\u3051\u306e syzkaller \u306f\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u304c\u91cd\u3044\u305f\u3081\u3001**\u81ea\u4f5c\u306e\u8efd\u91cf ioctl fuzzer** \u3092\u512a\u5148\n- \u5404\u30c9\u30e9\u30a4\u30d0\u306e ioctl \u306b\u5909\u7570\u5165\u529b\u3092\u9001\u308a\u3001**\u30af\u30e9\u30c3\u30b7\u30e5 (kernel panic / watchdog / reboot)** \u3092\u691c\u77e5\n- \u30af\u30e9\u30c3\u30b7\u30e5\u691c\u77e5\u6642\u306f pstore / last_kmsg \u304b\u3089\u30ed\u30b0\u3092\u56de\u53ce\u3057\u3001\u539f\u56e0\u3092\u89e3\u6790\n- \u767a\u898b\u3057\u305f\u8106\u5f31\u6027 \u2192 exploit \u5316\uff08\u9577\u671f\uff09\n\n### 7.3 \u9032\u6357\u30fb\u6210\u679c\n\n**\u5b9f\u884c\u6e08\u307f fuzzer\uff08\u81ea\u4f5c\u3001NDK\u3067ARM32\u30af\u30ed\u30b9\u30b3\u30f3\u30d1\u30a4\u30eb\uff09:**\n\n| fuzzer | \u5bfe\u8c61 | \u7d50\u679c |\n|---|---|---|\n| kgsl_fuzz | \u30e9\u30f3\u30c0\u30e0ioctl | 10\u4e07\u56de\u30af\u30e9\u30c3\u30b7\u30e5\u306a\u3057 |\n| kgsl_fuzz2 | drawctxt+gpuobj+GPU_COMMAND | \u6709\u52b9\u306a\u72b6\u614b\u3067\u306e\u63a2\u7d22 |\n| kgsl_fuzz3 | \u6709\u52b9\u72b6\u614b+\u5909\u7570\u5f15\u6570 | **GPUOBJ_ALLOC\u3067\u30af\u30e9\u30c3\u30b7\u30e5** |\n| kgsl_fuzz_case | \u30b1\u30fc\u30b9\u5206\u96e2 | **\u30b1\u30fc\u30b95\uff08GPUOBJ_ALLOC\uff09\u3067\u30af\u30e9\u30c3\u30b7\u30e5\u7279\u5b9a** |\n| kgsl_alloc_* | \u30af\u30e9\u30c3\u30b7\u30e5\u5883\u754c\u63a2\u7d22 | \u3057\u304d\u3044\u5024\u7279\u5b9a |\n| kgsl_fuzz4 | fence/event | \u30af\u30e9\u30c3\u30b7\u30e5\u306a\u3057\uff08fence\u306f\u5805\u7262\uff09 |\n\n**\u767a\u898b\u3057\u305f\u30af\u30e9\u30c3\u30b7\u30e5\uff08DoS\uff09:**\n\n`IOCTL_KGSL_GPUOBJ_ALLOC` \u3067 `size >= 0x16000000`\uff08\u7d04352MB\uff09\u3092\u6307\u5b9a\u3059\u308b\u3068**\u30ab\u30fc\u30cd\u30eb\u304c\u30af\u30e9\u30c3\u30b7\u30e5\u3057\u7aef\u672b\u304c\u518d\u8d77\u52d5**\u3059\u308b\u3002\n\n- \u518d\u73fe\u6027: \u9ad8\uff08\u8907\u6570\u56de\u78ba\u8a8d\uff09\n- \u3057\u304d\u3044\u5024: `0x15000000`\uff08336MB\uff09\u6210\u529f / `0x16000000`\uff08352MB\uff09\u30af\u30e9\u30c3\u30b7\u30e5\n- \u6027\u8cea: **OOM/\u30e1\u30e2\u30ea\u67af\u6e07\u306b\u3088\u308b\u30ab\u30fc\u30cd\u30eb\u30d1\u30cb\u30c3\u30af\u3068\u63a8\u5b9a**\uff08DoS\uff09\n- \u6a29\u9650\u6607\u683c\u3078\u306e\u5229\u7528: **\u975e\u73fe\u5b9f\u7684**\uff08\u30e1\u30e2\u30ea\u7834\u58ca\u3067\u306f\u306a\u304f\u67af\u6e07\u306e\u305f\u3081\uff09\n\n**kgsl \u8abf\u67fb\u3067\u5224\u660e\u3057\u305f\u4e8b\u5b9f:**\n- `/dev/kgsl-3d0` \u306f `rw-rw-rw-`\uff08\u5168\u30a2\u30af\u30bb\u30b9\u53ef\u3001\u901a\u5e38\u306eAndroid\u3067\u306f\u7570\u4f8b\uff09\n- \u30c9\u30e9\u30a4\u30d0: KGSL 3.14 / Adreno 304\n- SVM \u633f\u5165\uff08USE_CPU_MAP\uff09\u306f\u52d5\u4f5c\u3059\u308b\u304c\u300132bit\u3067\u306f\u30e9\u30c3\u30d7\u4e0d\u53ef\n- drawctxt \u4f5c\u6210\u306b\u306f `PREAMBLE | NO_GMEM_ALLOC` \u306e\u4e21\u30d5\u30e9\u30b0\u304c\u5fc5\u9808\n\n**fuzzing\u306e\u9650\u754c:**\n- \u30af\u30e9\u30c3\u30b7\u30e5\u30ed\u30b0\uff08pstore/last_kmsg\uff09\u306f\u975eroot\u3067\u8aad\u3081\u306a\u3044\n- \u30af\u30e9\u30c3\u30b7\u30e5\u306e\u305f\u3073\u306b\u7aef\u672b\u518d\u8d77\u52d5\uff08\u7d041\u5206\uff09\u304c\u767a\u751f\u3057\u3001\u63a2\u7d22\u52b9\u7387\u304c\u4f4e\u3044\n- \u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u306a\u30c7\u30d0\u30a4\u30b9\u306f kgsl \u306e\u307f\uff08diag/ion/adsprpc \u306fSELinux\u5236\u9650\uff09\n\n---\n\n## 8. \u7d50\u8ad6\n\n**SH-03M\uff08docomo\u30ad\u30c3\u30ba\u30b1\u30fc\u30bf\u30a4\uff09\u306eroot\u5316\u306f\u3001\u672c\u8abf\u67fb\u306e\u7bc4\u56f2\u3067\u306f\u5b9f\u73fe\u624b\u6bb5\u304c\u78ba\u8a8d\u3067\u304d\u306a\u304b\u3063\u305f\u3002**\n\n### \u8a66\u884c\u3057\u305f\u5168\u30eb\u30fc\u30c8\u3068\u6700\u7d42\u7d50\u679c\n\n| \u30eb\u30fc\u30c8 | \u6700\u7d42\u7d50\u679c |\n|---|---|\n| \u30d6\u30fc\u30c8\u30ed\u30fc\u30c0\u30fc\u30a2\u30f3\u30ed\u30c3\u30af | \u62d2\u5426\uff08unlock_ability=0\uff09 |\n| EDL + firehose | \u5c02\u7528\u7f72\u540d\u9375\u304c\u975e\u516c\u958b\u3067\u4e0d\u53ef\u80fd |\n| \u65e2\u77e5\u30ab\u30fc\u30cd\u30ebCVE | \u5168\u3066\u4fee\u6b63\u6e08\u307f |\n| \u30b7\u30b9\u30c6\u30e0\u30a2\u30d7\u30ea\u6607\u683c | signature\u4fdd\u8b77\u3067\u4e0d\u53ef |\n| kgsl fuzzing | DoS\u306e\u307f\u767a\u898b\u3001root\u6607\u683c\u306b\u975e\u73fe\u5b9f\u7684 |\n| \u30ab\u30fc\u30cd\u30eb\u30e2\u30b8\u30e5\u30fc\u30eb | \u975eroot\u3067\u4e0d\u53ef |\n\n### \u6839\u672c\u7684\u306a\u8981\u56e0\n\n1. **\u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8 + \u7f72\u540d\u4ed8\u304d\u30d6\u30fc\u30c8\u30ed\u30fc\u30c0\u30fc**\uff08PK_HASH `0eed6924` \u306e\u5c02\u7528\u9375\u304c\u975e\u516c\u958b\uff09\n2. **\u4e3b\u8981\u306a\u65e2\u77e5CVE\u304c\u5168\u3066\u4fee\u6b63\u6e08\u307f**\uff08\u30b7\u30e3\u30fc\u30d7\u304c2019\u5e74\u6642\u70b9\u3067binder\u7cfb\u3092\u4fee\u6b63\uff09\n3. **\u5f37\u56fa\u306aSELinux\u30dd\u30ea\u30b7\u30fc**\uff08kgsl\u4ee5\u5916\u306e\u653b\u6483\u9762\u3092\u906e\u65ad\uff09\n4. **32bit ARM\u306e\u5236\u7d04**\uff0864bit\u524d\u63d0\u306eexploit\u624b\u6cd5\u304c\u591a\u6570\u5229\u7528\u4e0d\u53ef\uff09\n\n### \u6b8b\u308b\u53ef\u80fd\u6027\uff08\u672a\u5b9f\u65bd\uff09\n\n- **\u30bc\u30ed\u30c7\u30a4\u7684\u8106\u5f31\u6027\u306e\u9577\u671f\u7684\u306a\u63a2\u7d22**\uff08\u6570\u9031\u9593\u301c\u6570\u30f6\u6708\u898f\u6a21\u306e\u7814\u7a76\uff09\n- **root\u6a29\u9650\u3092\u5fc5\u8981\u3068\u3057\u306a\u3044\u4ee3\u66ff\u624b\u6bb5**\uff08ADB\u3067\u306e\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u7b49\uff09\n\n## 9. \u4ed8\u9332: \u4f5c\u6210\u3057\u305f\u30c4\u30fc\u30eb\n\n\u672c\u8abf\u67fb\u3067\u4f5c\u6210\u3057\u305f\u30c4\u30fc\u30eb\uff08\u3059\u3079\u3066\u9694\u96e2\u74b0\u5883\u3067\u958b\u767a\u30fb\u30c6\u30b9\u30c8\uff09\uff1a\n\n- `kgsl_probe.c` - KGSL\u30d0\u30fc\u30b8\u30e7\u30f3/\u30c7\u30d0\u30a4\u30b9\u60c5\u5831\u53d6\u5f97\n- `kgsl_cve_test*.c` - CVE\u30c8\u30ea\u30ac\u30fc\u691c\u8a3c\n- `kgsl_fuzz*.c` - kgsl ioctl fuzzer\uff084\u4e16\u4ee3\uff09\n- `kgsl_alloc_*.c` - \u30af\u30e9\u30c3\u30b7\u30e5\u5883\u754c\u63a2\u7d22\n- `fb_*.py` - fastboot \u81ea\u4f5c\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\uff08Download mode\u7528\uff09\n\n---\n\n## 10. \u53c2\u8003\u30ea\u30f3\u30af\n\n- \u30b7\u30e3\u30fc\u30d7 OSS \u516c\u958b: https://k-tai.sharp.co.jp/support/developers/oss/sh03m/index.html\n- bkerler/edl: https://github.com/bkerler/edl\n- temblast loaders: https://www.temblast.com/ref/loaders.htm\n- CVE-2020-11261: https://securitylab.github.com/advisories/GHSL-2020-374-kgsl/\n- CVE-2020-11239: https://securitylab.github.com/advisories/GHSL-2020-375-kgsl/\n- CVE-2023-33107 RCA: https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2023/CVE-2023-33107.html\n", "url": "https://gist.github.com/KRW0090/166c655e59c71f63be65acf67641b33d"}, {"timestamp": "2026-08-05T05:00:07.929Z", "date_only": false, "value": "2026-08-05T05:00:07.929343Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/timcore_hacking/810", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "cdfd5f36-adbf-4e61-89e0-199362de7737", "content": "\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 MediaTek\n\nCVE-2020-0069 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Nokia, Amazon, BLU, Sony, ZTE \u0438 \u043f\u0440.\n\n\u041c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 Google \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 MediaTek. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2020-0069 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Nokia, Amazon, BLU, Sony, ZTE \u0438 \u043f\u0440.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 Command Queue \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 MediaTek. \u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b XDA Developers, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043a\u0430\u0432\u0448\u0438\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u043f\u043b\u0430\u043d\u0448\u0435\u0442\u0430\u0445 Amazon Fire. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0432 \u0421\u0435\u0442\u0438 \u043a\u0430\u043a diplomatic, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043d\u0430 XDA Forums \u0441\u043a\u0440\u0438\u043f\u0442, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u043f\u043b\u0430\u043d\u0448\u0435\u0442\u0430\u0445 Fire.\n\n\u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c \u043f\u043e\u0437\u0434\u043d\u0435\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 MediaTek-su, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043f\u043b\u0430\u043d\u0448\u0435\u0442\u0430\u0445 \u043e\u0442 Amazon, \u043d\u043e \u0438 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 MediaTek, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Acer, Alcatel, ASUS, Huawei, Lenovo, LG, Meizu, Nokia, OPPO, Sony Xperia, ZTE \u0438 \u043f\u0440.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 TrendMicro \u0437\u0430 \u044f\u043d\u0432\u0430\u0440\u044c \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438\u0437 Play Store \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0434\u043d\u0443 \u0438\u0437 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, MediaTek-su \u0438\u043b\u0438 CVE-2019-2215 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432 2019 \u0433\u043e\u0434\u0443), \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u044d\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u044b \u0438\u0437 Play Store.\n\n\u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 MediaTek-su \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0443\u0436\u0435 \u0433\u043e\u0434, \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0443\u0441\u043f\u0435\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443, Vivo, Huawei/Honor, Oppo \u0438 Samsung \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u044f\u0434\u0440\u043e \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u044b\u043d\u0435\u0448\u043d\u0435\u043c \u0432\u0438\u0434\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u043d \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e \u043f\u0435\u0440\u0432\u043e\u0439 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.securitylab.ru/news/505520.php", "url": "https://t.me/timcore_hacking/810"}, {"timestamp": "2026-08-06T00:00:49.886Z", "date_only": false, "value": "2026-08-06T00:00:49.886984Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/timcore_hacking/810", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "68949d70-cae7-48b7-9829-7ab396682fb5", "content": "\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 MediaTek\n\nCVE-2020-0069 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Nokia, Amazon, BLU, Sony, ZTE \u0438 \u043f\u0440.\n\n\u041c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 Google \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 MediaTek. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2020-0069 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Nokia, Amazon, BLU, Sony, ZTE \u0438 \u043f\u0440.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 Command Queue \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 MediaTek. \u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b XDA Developers, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043a\u0430\u0432\u0448\u0438\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u043f\u043b\u0430\u043d\u0448\u0435\u0442\u0430\u0445 Amazon Fire. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0432 \u0421\u0435\u0442\u0438 \u043a\u0430\u043a diplomatic, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043d\u0430 XDA Forums \u0441\u043a\u0440\u0438\u043f\u0442, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u043f\u043b\u0430\u043d\u0448\u0435\u0442\u0430\u0445 Fire.\n\n\u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c \u043f\u043e\u0437\u0434\u043d\u0435\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 MediaTek-su, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043f\u043b\u0430\u043d\u0448\u0435\u0442\u0430\u0445 \u043e\u0442 Amazon, \u043d\u043e \u0438 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 MediaTek, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Acer, Alcatel, ASUS, Huawei, Lenovo, LG, Meizu, Nokia, OPPO, Sony Xperia, ZTE \u0438 \u043f\u0440.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 TrendMicro \u0437\u0430 \u044f\u043d\u0432\u0430\u0440\u044c \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438\u0437 Play Store \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0434\u043d\u0443 \u0438\u0437 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, MediaTek-su \u0438\u043b\u0438 CVE-2019-2215 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432 2019 \u0433\u043e\u0434\u0443), \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u044d\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u044b \u0438\u0437 Play Store.\n\n\u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 MediaTek-su \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0443\u0436\u0435 \u0433\u043e\u0434, \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0443\u0441\u043f\u0435\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443, Vivo, Huawei/Honor, Oppo \u0438 Samsung \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u044f\u0434\u0440\u043e \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u044b\u043d\u0435\u0448\u043d\u0435\u043c \u0432\u0438\u0434\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u043d \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e \u043f\u0435\u0440\u0432\u043e\u0439 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.securitylab.ru/news/505520.php", "url": "https://t.me/timcore_hacking/810", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-22T21:00:05.552Z", "date_only": false, "value": "2026-08-22T21:00:05.552735Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/nuancesprognews/639", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f648eb01-67ca-4903-b400-bdc6286f6477", "content": "\u200b\u200b\u041d\u043e\u0432\u0430\u044f 0-day \u0432 Android \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u043c Samsung, Huawei, Xiaomi\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442 Google Project Zero \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 \u044d\u0442\u043e\u0439 \u041e\u0421. \u041d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0431\u0440\u0435\u0448\u0438 \u043d\u0435\u0442 \u043f\u0430\u0442\u0447\u0430.\n\n\u041f\u043e\u043a\u0430 \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u0430 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u2014 \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b NSO Group. NSO Group \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u043f\u0440\u043e\u0434\u0430\u0436\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0442\u0440\u0430\u043d.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0443\u044e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2019-2215, \u0432\u044b\u044f\u0432\u0438\u043b \u041c\u044d\u0434\u0434\u0438 \u0421\u0442\u043e\u0443\u043d, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 Project Zero. \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0441\u0442\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0441\u0435\u0433\u043e\u0434\u043d\u044f, \u0441\u043f\u0443\u0441\u0442\u044f \u0441\u0435\u043c\u044c \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android.\n\n\u0411\u0440\u0435\u0448\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0443\u0440\u043e\u0432\u043d\u044f \u044f\u0434\u0440\u0430 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u0430\u043c\u044f\u0442\u0438 use-after-free. \u041f\u0440\u0438 \u0443\u0434\u0430\u0447\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e root \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u0421\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0441\u0432\u0435\u0436\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438:\n\nPixel 1, Pixel 1 XL, Pixel 2, Pixel 2 XL, Huawei P20, Xiaomi Redmi 5A, Xiaomi Redmi Note 5, Xiaomi A1, Oppo A3, Moto Z3, Oreo LG phones, Samsung S,7 Samsung S8, Samsung S9.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e Pixel 3, 3 XL \u0438 3a \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u044f\u0434\u0440\u0430 Android \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041c\u044d\u0434\u0434\u0438 \u0421\u0442\u043e\u0443\u043d\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0439 \u0431\u0430\u0433 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome. Google \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0434\u044b\u0440\u044b \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 Android. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u0430\u043a \u0441\u043a\u043e\u0440\u043e \u0432\u0441\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u044d\u0442\u0438 \u043f\u0430\u0442\u0447\u0438 \u2014 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0432\u043e\u043f\u0440\u043e\u0441.\n\n\u27a1\ufe0f http://bit.ly/30U9Abm", "url": "https://t.me/nuancesprognews/639", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-22T22:00:04.912Z", "date_only": false, "value": "2026-08-22T22:00:04.912563Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/25mLFKuVy8UKLdbQugnyRLveX4s-n1eUB4jQvqeZ0RCnT94", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d695d453-0fa3-4ec6-86cc-ec92fe044a18", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T20:02:51.245Z", "date_only": false, "value": "2026-09-01T20:02:51.245502Z", "kind": "sighting", "label": "Seen", "source": "Telegram/6qjOSGz2rITD2x_SNIoQHd-DZkODcpodubtghS_wd2V0nZGz", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "ec324fe5-9e5d-4b00-b5b5-596957b1f77e"}, {"timestamp": "2026-09-04T05:00:03.708Z", "date_only": false, "value": "2026-09-04T05:00:03.708941Z", "kind": "sighting", "label": "Seen", "source": "Telegram/lVgH1s8o3BEPOa07KzwMpLSHxMHP_3LqYIgOPKG006RedI8", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c4fbf510-9946-4088-b5a8-270bf5d047c8"}, {"timestamp": "2026-09-04T05:00:04.311Z", "date_only": false, "value": "2026-09-04T05:00:04.311831Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "6137f4c2-e6d3-425b-ae57-2e4378c99a54"}, {"timestamp": "2026-09-05T01:00:38.531Z", "date_only": false, "value": "2026-09-05T01:00:38.531588Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lVgH1s8o3BEPOa07KzwMpLSHxMHP_3LqYIgOPKG006RedI8", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "7c8f8455-d9cc-456f-84a4-b5c1486cf7b8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-05T01:00:38.969Z", "date_only": false, "value": "2026-09-05T01:00:38.969799Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0cd3d867-5c7d-498d-a908-3bec651fd3cc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-08T19:00:05.643Z", "date_only": false, "value": "2026-09-08T19:00:05.643616Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/6qjOSGz2rITD2x_SNIoQHd-DZkODcpodubtghS_wd2V0nZGz", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "37f30c63-42a6-4f32-b931-3683658601e1", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-12T12:00:05.347Z", "date_only": false, "value": "2026-09-12T12:00:05.347129Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OmvZqlZzjGZFLdJb1Q1KMJ6kqdti669uRggn5kTYcsdoC98", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "fa31f58f-6d53-41c1-843e-ee78dbd2a7e3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-12T18:00:06.391Z", "date_only": false, "value": "2026-09-12T18:00:06.391137Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/yLFyayC8woaXON6gBP0uC2dhqPyYy7otPitMryQ7HGKFwmU", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "35e6b0a6-b119-45dc-bb77-a5e0b6c4649f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-12T22:00:05.489Z", "date_only": false, "value": "2026-09-12T22:00:05.489535Z", "kind": "sighting", "label": "Seen", "source": "Telegram/89mqymHLrliYqD2lpNbDrV-QJtERDlku7-I3J8T1VfuOS7o", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "df5a8f7e-dd20-4c15-a448-24b6eb51a1e6"}, {"timestamp": "2026-09-13T00:00:06.249Z", "date_only": false, "value": "2026-09-13T00:00:06.249518Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/89mqymHLrliYqD2lpNbDrV-QJtERDlku7-I3J8T1VfuOS7o", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "727a5a92-a8b2-475f-8244-90aa79c1a3b5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-13T05:00:04.562Z", "date_only": false, "value": "2026-09-13T05:00:04.562303Z", "kind": "sighting", "label": "Seen", "source": "Telegram/enuFtfy7_La2nhky1baL4f3PHQ7zXYHTXyMen1yRgFStmpo", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "4295629e-9c26-4470-969b-016265b6034d"}, {"timestamp": "2026-09-13T15:00:04.955Z", "date_only": false, "value": "2026-09-13T15:00:04.955457Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_ItBW2ISPfXTP_GQ1u33hZLuQB32BZCCcm6UD9oQHRUit34", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "518cbfb4-f610-4ae7-ad0a-ac35610b9510"}, {"timestamp": "2026-09-13T19:00:06.986Z", "date_only": false, "value": "2026-09-13T19:00:06.986754Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fCYfsp7T0HvdgYUk6fpwx7PmCBxDyJrWdAt8KHajAR5t990", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "eac3e558-90c5-4128-96cf-c4777a6e5352", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T00:00:08.747Z", "date_only": false, "value": "2026-09-14T00:00:08.747678Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Sw7w0mgYZztNyKRF3fWi-eeav_uu22vd4Rf64ipdmjeMdzo", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0000525c-f94a-42cd-b856-1025e316cbe6"}, {"timestamp": "2026-09-14T00:00:13.244Z", "date_only": false, "value": "2026-09-14T00:00:13.244516Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_ItBW2ISPfXTP_GQ1u33hZLuQB32BZCCcm6UD9oQHRUit34", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "799a2457-f136-4db2-b379-074027a66d27", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T00:00:30.577Z", "date_only": false, "value": "2026-09-14T00:00:30.577568Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/enuFtfy7_La2nhky1baL4f3PHQ7zXYHTXyMen1yRgFStmpo", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "47479512-8743-4416-a2cf-40f73141ee04", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T08:00:06.740Z", "date_only": false, "value": "2026-09-14T08:00:06.740866Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gyuJkhwE1QW5dp6T2sqLY0W_FIihZTaffwzmEDVTb_8A9F0", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "5a67f565-4e76-4503-9bdb-56dd9f8d8f54", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T15:00:05.180Z", "date_only": false, "value": "2026-09-14T15:00:05.180406Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/61abUJDSbFymRymM4Ih08MIeup8wZ1kM30Vo8fPpc00h4nk", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "ec12000f-e1c7-4284-aa49-e0b61a1185db", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T20:00:06.181Z", "date_only": false, "value": "2026-09-14T20:00:06.181448Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EGBdybLD2huAAn1sVkecjoZQ9tzhmpQFII0lcy95UfJwU3I", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f6c0f1a1-83f5-41a0-a4d8-3233b7b3bdee", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T23:00:03.635Z", "date_only": false, "value": "2026-09-14T23:00:03.635129Z", "kind": "sighting", "label": "Seen", "source": "Telegram/x38-sxvf4qgSSEOQO0rIsdAof5ij13oL7xnEFNSRLy91YY4", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "acf01914-bee2-49c8-b88a-138b3ad60e9e"}, {"timestamp": "2026-09-15T00:00:32.051Z", "date_only": false, "value": "2026-09-15T00:00:32.051530Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Sw7w0mgYZztNyKRF3fWi-eeav_uu22vd4Rf64ipdmjeMdzo", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "080725a6-75c7-411c-9be8-8c32fe06b05d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T01:00:03.761Z", "date_only": false, "value": "2026-09-15T01:00:03.761514Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bMxyT3RashzRlEqesMAot9dl-uO8YU-FByy-p5IzSSXZEFI", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "903d9eec-f786-4217-99e1-bd9e460a3ca9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T07:00:05.757Z", "date_only": false, "value": "2026-09-15T07:00:05.757921Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/KbOEosNsbtDItspwyIfguqHva0LkSUJ6VXT3bej9m7sg9NA", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "1906b407-7be2-4913-8993-b1dd34f14a91", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T14:00:05.528Z", "date_only": false, "value": "2026-09-15T14:00:05.528109Z", "kind": "sighting", "label": "Seen", "source": "Telegram/M1_uN704NAQqARlK10J1RV2V4jZMloD0xAwA5jP4rCMGPaU", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "91c0bbef-e00f-41cf-a864-3d25f1fdc957"}, {"timestamp": "2026-09-15T20:00:04.588Z", "date_only": false, "value": "2026-09-15T20:00:04.588582Z", "kind": "sighting", "label": "Seen", "source": "Telegram/oWUBOeYSyM3NQf0XW-8Drdwpqd4EcAE5j0qMZRO3tnY8-xc", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2f0c868b-69af-40cb-a4df-f449f8aed1fc"}, {"timestamp": "2026-09-15T23:00:05.055Z", "date_only": false, "value": "2026-09-15T23:00:05.055778Z", "kind": "sighting", "label": "Seen", "source": "Telegram/YkyluepN76ij9Ij5tEEjyQwEQrptqDukdN9BPlyExWtLz5s", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "15117681-9675-4f72-9526-b77ec780d8d9"}, {"timestamp": "2026-09-16T00:00:09.580Z", "date_only": false, "value": "2026-09-16T00:00:09.580261Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/YkyluepN76ij9Ij5tEEjyQwEQrptqDukdN9BPlyExWtLz5s", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "709df198-adef-4efc-83a5-055a55c79159", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T00:00:12.052Z", "date_only": false, "value": "2026-09-16T00:00:12.052648Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/oWUBOeYSyM3NQf0XW-8Drdwpqd4EcAE5j0qMZRO3tnY8-xc", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "7dba12f0-27e5-4994-b5bd-9bb2269f9c78", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T00:00:31.113Z", "date_only": false, "value": "2026-09-16T00:00:31.113392Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/M1_uN704NAQqARlK10J1RV2V4jZMloD0xAwA5jP4rCMGPaU", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "8c5e3d2b-3f20-44a3-aabf-10bfa086582f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-17T13:00:04.774Z", "date_only": false, "value": "2026-09-17T13:00:04.774430Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ifJivUowikeMOW_QrouBCq7ccus6NqBb3jRfVEFjYmZ_jxo", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "75c1d29c-1f15-46f1-815b-7ed497ceb7e9"}, {"timestamp": "2026-09-18T00:00:06.080Z", "date_only": false, "value": "2026-09-18T00:00:06.080434Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ifJivUowikeMOW_QrouBCq7ccus6NqBb3jRfVEFjYmZ_jxo", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0375574d-a6b7-4b75-9d42-907b102b0372", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T09:14:51Z", "date_only": false, "value": "2026-09-25T09:14:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_HB286DIGoIh24iXPSSHTf2y9v8CxhkI8N_vcSD8uV1hZ7w", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "88e3e428-0749-48a7-9ea5-7a899a62b895", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T09:14:51Z", "date_only": false, "value": "2026-09-25T09:14:51.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_HB286DIGoIh24iXPSSHTf2y9v8CxhkI8N_vcSD8uV1hZ7w", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "53231d9b-4f59-4706-b7e0-e2107526b0a9"}, {"timestamp": "2026-10-05T15:49:11Z", "date_only": false, "value": "2026-10-05T15:49:11Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2019-2215", "record": "UBUNTU-CVE-2019-2215", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-07T12:06:52Z", "date_only": false, "value": "2026-10-07T12:06:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104533", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c2a40081-6505-4507-8511-eead3a9135ad", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #\u63d0\u6743 #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2019-2215-oppo-a77t\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a WJNKAC\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-07 11:36:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u5728AI\u8f85\u52a9\u4e0b\u5229\u7528cve-2019-2215 \u5b8c\u6210OPPO A77t\u63d0\u6743\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104533", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T21:00:04Z", "date_only": false, "value": "2026-10-07T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XsCqwcFszPjQSwpV59IqFI9CcBBRxT2RNGxlhfy_aazsC9w", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "4ac5b72b-cd9c-4594-8178-997e229ea0da", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T21:00:04Z", "date_only": false, "value": "2026-10-07T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XsCqwcFszPjQSwpV59IqFI9CcBBRxT2RNGxlhfy_aazsC9w", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "abf38923-0642-4813-b205-f81e0b2c99c8"}, {"timestamp": "2026-10-11T09:00:05Z", "date_only": false, "value": "2026-10-11T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4GRZYYzkX022j2KJAEx-pHIkBKxfsReu-mvdiIoNLL5dsC4", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d1c23022-5688-4206-8d44-494531c947d7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-11T09:00:05Z", "date_only": false, "value": "2026-10-11T09:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/4GRZYYzkX022j2KJAEx-pHIkBKxfsReu-mvdiIoNLL5dsC4", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "63f69b27-e3e1-4a1c-887f-b46a27acd5c3"}, {"timestamp": "2026-10-15T07:00:16Z", "date_only": false, "value": "2026-10-15T07:00:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/47CAXox5bNnAhIn8VrRaXNAa4RJe3UQpIL5B4c9e5DC84cs", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d54e3cd7-e9da-42ed-afa6-0c3db494b196", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-15T07:00:16Z", "date_only": false, "value": "2026-10-15T07:00:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/47CAXox5bNnAhIn8VrRaXNAa4RJe3UQpIL5B4c9e5DC84cs", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "6d5ec636-934a-441c-b442-af8645812978"}, {"timestamp": "2026-10-19T03:00:13Z", "date_only": false, "value": "2026-10-19T03:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Pj944NQc9vhEV09ATK6oMoNYpbBpujzmGWAxbMR9blwMk5I", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "21f9c9d6-396f-44fa-9a05-646ac156ef4c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-19T03:00:13Z", "date_only": false, "value": "2026-10-19T03:00:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Pj944NQc9vhEV09ATK6oMoNYpbBpujzmGWAxbMR9blwMk5I", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0f97facd-e1b0-484a-85a7-617a5d29b2f2"}, {"timestamp": "2026-10-20T21:00:04Z", "date_only": false, "value": "2026-10-20T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EfdUSAXdyxJRIe-8KTko44NX2cK8caPbyVsIG-JUE40U5Lc", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "1f6a3053-3a73-42f7-b7e4-04ae365d766f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-20T21:00:04Z", "date_only": false, "value": "2026-10-20T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/EfdUSAXdyxJRIe-8KTko44NX2cK8caPbyVsIG-JUE40U5Lc", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2bc7eeed-f2b1-4245-9785-8274dfcfda35"}, {"timestamp": "2026-10-23T15:00:07Z", "date_only": false, "value": "2026-10-23T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/G9gEKrUFOOEhcW1npMJ6w16B-U-YwlWzxZ1FVJRuAh_zJ5Q", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f00df950-0f95-4f01-8502-e5b4dbd177f8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-23T15:00:07Z", "date_only": false, "value": "2026-10-23T15:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/G9gEKrUFOOEhcW1npMJ6w16B-U-YwlWzxZ1FVJRuAh_zJ5Q", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "49143cbe-648f-460e-a8ae-31a272fd22b2"}, {"timestamp": "2026-10-30T03:00:11Z", "date_only": false, "value": "2026-10-30T03:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wvPHs1bh3OBnLznr082Yufp8z0cDNnIL6tRYUW9Eb1E3Kao", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "37974c68-3d6e-40b7-b38c-ef486169e497", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-30T03:00:11Z", "date_only": false, "value": "2026-10-30T03:00:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wvPHs1bh3OBnLznr082Yufp8z0cDNnIL6tRYUW9Eb1E3Kao", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "1264d550-ca48-4f02-ad88-29c6d109fe7a"}, {"timestamp": "2026-11-01T03:00:14Z", "date_only": false, "value": "2026-11-01T03:00:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SUI5ALFurRvw57RBT0_kaxvGhhQk2M3BTe0tnr-2uicX3_o", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f79627de-8f37-4ead-9f3e-c002a6508690", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-01T03:00:14Z", "date_only": false, "value": "2026-11-01T03:00:14.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SUI5ALFurRvw57RBT0_kaxvGhhQk2M3BTe0tnr-2uicX3_o", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "cbb25a57-0404-4d53-94e6-d7c4c94d37f2"}], "metrics": {"as_of": "2026-11-04T00:11:29.534Z", "anchors": {"origin": {"timestamp": "2019-10-11T18:16:48Z", "date_only": false, "value": "2019-10-11T18:16:48.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-2215", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2019-10-11T18:16:48Z", "date_only": false, "value": "2019-10-11T18:16:48.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-2215", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2019-10-04T00:00:00Z", "date_only": false, "value": "2019-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/47463", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "eaeb7394-4ad2-4e35-951b-b15fd3778846", "url": "https://www.exploit-db.com/exploits/47463", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2019-10-04T05:41:24Z", "date_only": false, "value": "2019-10-04T05:41:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/422", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "24438e3e-5fa0-4118-bde6-48eaebc8c937", "content": "Kernel privilege escalation bug in Android affecting fully patched Pixel 2 & others\nThe bug was allegedly being used or sold by the NSO Group.\nLocal PoC exploit included. CVE-2019-2215\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=1942", "url": "https://t.me/androidMalware/422", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": -650124.0, "hours": -180.59, "days": -7.524583333333333, "min_seconds": -650124.0, "max_seconds": -650124.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2019-10-11T18:16:48Z", "date_only": false, "value": "2019-10-11T18:16:48.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-2215", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2019-10-04T05:41:24Z", "date_only": false, "value": "2019-10-04T05:41:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/422", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "24438e3e-5fa0-4118-bde6-48eaebc8c937", "content": "Kernel privilege escalation bug in Android affecting fully patched Pixel 2 & others\nThe bug was allegedly being used or sold by the NSO Group.\nLocal PoC exploit included. CVE-2019-2215\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=1942", "url": "https://t.me/androidMalware/422", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": -650124.0, "hours": -180.59, "days": -7.524583333333333, "min_seconds": -650124.0, "max_seconds": -650124.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2019-10-11T18:16:48Z", "date_only": false, "value": "2019-10-11T18:16:48.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-2215", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2019-10-04T05:41:24Z", "date_only": false, "value": "2019-10-04T05:41:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/422", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "24438e3e-5fa0-4118-bde6-48eaebc8c937", "content": "Kernel privilege escalation bug in Android affecting fully patched Pixel 2 & others\nThe bug was allegedly being used or sold by the NSO Group.\nLocal PoC exploit included. CVE-2019-2215\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=1942", "url": "https://t.me/androidMalware/422", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": -670608.0, "hours": -186.28, "days": -7.761666666666667, "min_seconds": -670608.0, "max_seconds": -584208.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2019-10-11T18:16:48Z", "date_only": false, "value": "2019-10-11T18:16:48.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-2215", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2019-10-04T00:00:00Z", "date_only": false, "value": "2019-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/47463", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "eaeb7394-4ad2-4e35-951b-b15fd3778846", "url": "https://www.exploit-db.com/exploits/47463", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 222933281.534145, "hours": 61925.9115372625, "days": 2580.2463140526042, "min_seconds": 222933281.534145, "max_seconds": 222933281.534145, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-10-11T18:16:48Z", "date_only": false, "value": "2019-10-11T18:16:48.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-2215", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-04T00:11:29.534Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 223583405.534145, "hours": 62106.5015372625, "days": 2587.7708973859376, "min_seconds": 223583405.534145, "max_seconds": 223583405.534145, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-10-04T05:41:24Z", "date_only": false, "value": "2019-10-04T05:41:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/422", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "24438e3e-5fa0-4118-bde6-48eaebc8c937", "content": "Kernel privilege escalation bug in Android affecting fully patched Pixel 2 & others\nThe bug was allegedly being used or sold by the NSO Group.\nLocal PoC exploit included. CVE-2019-2215\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=1942", "url": "https://t.me/androidMalware/422", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-04T00:11:29.534Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 223603889.534145, "hours": 62112.1915372625, "days": 2588.007980719271, "min_seconds": 223517489.534145, "max_seconds": 223603889.534145, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-10-04T00:00:00Z", "date_only": false, "value": "2019-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/47463", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "eaeb7394-4ad2-4e35-951b-b15fd3778846", "url": "https://www.exploit-db.com/exploits/47463", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-04T00:11:29.534Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}