{"id":"ASB-A-207057578","details":"In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-207057578","CVE-2021-39703"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2022-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-03-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2022-03-01","types":["EoP"],"vanir_signatures":[{"target":{"function":"updateState","file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":true,"digest":{"length":583,"function_hash":"54425598277980575929640324737301152093"},"id":"ASB-A-207057578-5b5e8746","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195"},{"deprecated":true,"digest":{"line_hashes":["331537831702159944195476027665015398778","38774129313190311685340067283725616069","120903225000402718040275788921171157147","301486738854509283800807690940361041913","121142295986876203341674508492706830005","46362811130412960625656437063441543603","33669729740487517841887553297815267379","25319931044082416016815488811566682402","174387836260206595936852178067759662102","44263388442183779461657787722177837483","291952323210292735537106192941820090943","80787781477411850695755972461516213439","104884853205472620738470290470922971133"],"threshold":0.9},"id":"ASB-A-207057578-6616e876","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195","target":{"function":"updateHostState","file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":true,"digest":{"function_hash":"131789015277656571266383753783366223515","length":355},"id":"ASB-A-207057578-8e1599f3","match_only_versions":["12"],"signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-207057578.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-03-01"}]}],"versions":["12L"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195"],"severity":"High","spl":"2022-03-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-207057578-8b53f77c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195","target":{"function":"updateState","file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":true,"digest":{"function_hash":"54425598277980575929640324737301152093","length":583}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":true,"digest":{"line_hashes":["331537831702159944195476027665015398778","38774129313190311685340067283725616069","120903225000402718040275788921171157147","301486738854509283800807690940361041913","121142295986876203341674508492706830005","46362811130412960625656437063441543603","33669729740487517841887553297815267379","25319931044082416016815488811566682402","174387836260206595936852178067759662102","44263388442183779461657787722177837483","291952323210292735537106192941820090943","80787781477411850695755972461516213439","104884853205472620738470290470922971133"],"threshold":0.9},"id":"ASB-A-207057578-95e7b9c2"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/54f4c1843d4d41fb784f416575ec8b9857e3d195","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"updateHostState"},"deprecated":true,"digest":{"function_hash":"131789015277656571266383753783366223515","length":355},"id":"ASB-A-207057578-e7c306d0","match_only_versions":["12L"],"signature_type":"Function"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-207057578.json"}}],"schema_version":"1.9.0"}