{"id":"ASB-A-207057578","details":"In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-207057578","CVE-2021-39703"],"modified":"2026-05-26T15:46:26.044149249Z","published":"2022-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-03-01"}]}],"versions":["12"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195"],"spl":"2022-03-01","vanir_signatures":[{"id":"ASB-A-207057578-5b5e8746","deprecated":true,"digest":{"length":583,"function_hash":"54425598277980575929640324737301152093"},"target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"updateState"},"source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195","signature_version":"v1","signature_type":"Function"},{"deprecated":true,"id":"ASB-A-207057578-6616e876","source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"signature_type":"Line","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["331537831702159944195476027665015398778","38774129313190311685340067283725616069","120903225000402718040275788921171157147","301486738854509283800807690940361041913","121142295986876203341674508492706830005","46362811130412960625656437063441543603","33669729740487517841887553297815267379","25319931044082416016815488811566682402","174387836260206595936852178067759662102","44263388442183779461657787722177837483","291952323210292735537106192941820090943","80787781477411850695755972461516213439","104884853205472620738470290470922971133"]}},{"match_only_versions":["12"],"digest":{"length":355,"function_hash":"131789015277656571266383753783366223515"},"signature_type":"Function","id":"ASB-A-207057578-8e1599f3","deprecated":true,"target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"updateHostState"},"source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195","signature_version":"v1"}],"types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-207057578.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-03-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195"],"vanir_signatures":[{"id":"ASB-A-207057578-8b53f77c","deprecated":true,"digest":{"length":583,"function_hash":"54425598277980575929640324737301152093"},"target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"updateState"},"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195"},{"id":"ASB-A-207057578-95e7b9c2","deprecated":true,"source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195","digest":{"threshold":0.9,"line_hashes":["331537831702159944195476027665015398778","38774129313190311685340067283725616069","120903225000402718040275788921171157147","301486738854509283800807690940361041913","121142295986876203341674508492706830005","46362811130412960625656437063441543603","33669729740487517841887553297815267379","25319931044082416016815488811566682402","174387836260206595936852178067759662102","44263388442183779461657787722177837483","291952323210292735537106192941820090943","80787781477411850695755972461516213439","104884853205472620738470290470922971133"]},"signature_type":"Line","signature_version":"v1","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}},{"match_only_versions":["12L"],"digest":{"length":355,"function_hash":"131789015277656571266383753783366223515"},"signature_type":"Function","deprecated":true,"id":"ASB-A-207057578-e7c306d0","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"updateHostState"},"source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195","signature_version":"v1"}],"types":["EoP"],"spl":"2022-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-207057578.json"}}],"schema_version":"1.7.5"}