{"id":"ASB-A-207057578", "published":"2022-03-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2021-39703", "A-207057578"], "details":"In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2022-03-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195"], "severity":"High", "spl":"2022-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":true, "digest":{"function_hash":"54425598277980575929640324737301152093", "length":583}, "id":"ASB-A-207057578-5b5e8746", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"updateState"}}, {"deprecated":true, "digest":{"line_hashes":["331537831702159944195476027665015398778", "38774129313190311685340067283725616069", "120903225000402718040275788921171157147", "301486738854509283800807690940361041913", "121142295986876203341674508492706830005", "46362811130412960625656437063441543603", "33669729740487517841887553297815267379", "25319931044082416016815488811566682402", "174387836260206595936852178067759662102", "44263388442183779461657787722177837483", "291952323210292735537106192941820090943", "80787781477411850695755972461516213439", "104884853205472620738470290470922971133"], "threshold":0.9}, "id":"ASB-A-207057578-6616e876", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}}, {"deprecated":true, "digest":{"function_hash":"131789015277656571266383753783366223515", "length":355}, "id":"ASB-A-207057578-8e1599f3", "match_only_versions":["12"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"updateHostState"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2022-03-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195"], "severity":"High", "spl":"2022-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":true, "digest":{"function_hash":"54425598277980575929640324737301152093", "length":583}, "id":"ASB-A-207057578-8b53f77c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"updateState"}}, {"deprecated":true, "digest":{"line_hashes":["331537831702159944195476027665015398778", "38774129313190311685340067283725616069", "120903225000402718040275788921171157147", "301486738854509283800807690940361041913", "121142295986876203341674508492706830005", "46362811130412960625656437063441543603", "33669729740487517841887553297815267379", "25319931044082416016815488811566682402", "174387836260206595936852178067759662102", "44263388442183779461657787722177837483", "291952323210292735537106192941820090943", "80787781477411850695755972461516213439", "104884853205472620738470290470922971133"], "threshold":0.9}, "id":"ASB-A-207057578-95e7b9c2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}}, {"deprecated":true, "digest":{"function_hash":"131789015277656571266383753783366223515", "length":355}, "id":"ASB-A-207057578-e7c306d0", "match_only_versions":["12L"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"updateHostState"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2022-03-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195"}]}