{"id":"ASB-A-353712853", "published":"2024-11-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2024-43085", "A-353712853"], "details":"In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15-next:0"}, {"fixed":"15-next:2024-11-01"}]}], "versions":["15-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7c6ec68537ba8abf798afd9ab7c3e5889841171f"], "severity":"High", "spl":"2024-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["296625860436914854122118001554626861007", "78591271064963485081635982432654240084", "96984731508178923318459843292183940344", "73495414660657096950438272839323314432", "266368202020279763643946413622106401355", "108524734075640299277293291048035489345", "5518621410266624112116420170662109165", "273742428083560993362560509933858722495", "222353554629952858307528742508185316425", "311437237515890210155099304585149563556", "25970352589183319051863534533797786055", "313595729115024346300182506362894953285", "206178075041255068443320906527741155414", "140221536153661281371407326755103500234", "124474614351999218944935845102626980200"], "threshold":0.9}, "id":"ASB-A-353712853-2ee3f708", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7c6ec68537ba8abf798afd9ab7c3e5889841171f", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}}, {"deprecated":false, "digest":{"function_hash":"52203420946377433023336902847671327104", "length":2806}, "id":"ASB-A-353712853-38a874d4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7c6ec68537ba8abf798afd9ab7c3e5889841171f", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"handleMessage"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2024-11-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ef6f37e5292ae3491de1857751dc01a319bb61d1"], "severity":"High", "spl":"2024-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"237446641465118461929782557737870425448", "length":2789}, "id":"ASB-A-353712853-1ea4a934", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ef6f37e5292ae3491de1857751dc01a319bb61d1", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"handleMessage"}}, {"deprecated":false, "digest":{"line_hashes":["82539860095409532767780005366733516697", "247367668906640266368830489764305696335", "270166610605029388727275532461911588443", "295766741956319021409471366309707414863", "205591127483026183749919495093873477385", "249655596625849762383609879921755249023", "170767302155596183688132682282414424879", "155900569156437865269117652655379277295"], "threshold":0.9}, "id":"ASB-A-353712853-cdf6c919", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ef6f37e5292ae3491de1857751dc01a319bb61d1", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2024-11-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/643bea502a92329e72585050fb7fa5535456094f"], "severity":"High", "spl":"2024-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["82539860095409532767780005366733516697", "247367668906640266368830489764305696335", "270166610605029388727275532461911588443", "295766741956319021409471366309707414863", "205591127483026183749919495093873477385", "249655596625849762383609879921755249023", "170767302155596183688132682282414424879", "155900569156437865269117652655379277295"], "threshold":0.9}, "id":"ASB-A-353712853-d08059c0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/643bea502a92329e72585050fb7fa5535456094f", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}}, {"deprecated":false, "digest":{"function_hash":"237446641465118461929782557737870425448", "length":2789}, "id":"ASB-A-353712853-ff3c753e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/643bea502a92329e72585050fb7fa5535456094f", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"handleMessage"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2024-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f927d03008b4acd7616c9a2dfbac62bac6983a7c"], "severity":"High", "spl":"2024-11-01", "types":["EoP"]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2024-11-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/aec6c731bfdbe7f0fe537948563a7aeee5cf05e2"], "severity":"High", "spl":"2024-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["82539860095409532767780005366733516697", "247367668906640266368830489764305696335", "270166610605029388727275532461911588443", "295766741956319021409471366309707414863", "205591127483026183749919495093873477385", "249655596625849762383609879921755249023", "170767302155596183688132682282414424879", "155900569156437865269117652655379277295"], "threshold":0.9}, "id":"ASB-A-353712853-36d9ace0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/aec6c731bfdbe7f0fe537948563a7aeee5cf05e2", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}}, {"deprecated":false, "digest":{"function_hash":"276251499281960789647196136559449074585", "length":2790}, "id":"ASB-A-353712853-6b7a06bd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/aec6c731bfdbe7f0fe537948563a7aeee5cf05e2", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"handleMessage"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2024-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/37be5d18e529877fcd3c62063aec205a96660449"], "severity":"High", "spl":"2024-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"52203420946377433023336902847671327104", "length":2806}, "id":"ASB-A-353712853-0eb803c0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/37be5d18e529877fcd3c62063aec205a96660449", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java", "function":"handleMessage"}}, {"deprecated":false, "digest":{"line_hashes":["273742428083560993362560509933858722495", "222353554629952858307528742508185316425", "311437237515890210155099304585149563556", "25970352589183319051863534533797786055", "313595729115024346300182506362894953285", "206178075041255068443320906527741155414", "140221536153661281371407326755103500234", "124474614351999218944935845102626980200"], "threshold":0.9}, "id":"ASB-A-353712853-6481881c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/37be5d18e529877fcd3c62063aec205a96660449", "target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2024-11-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/2457d4e459ee6ffd099b9ff7cce9c83119c3ce66"}]}