{"id":"ASB-A-353712853","details":"In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-353712853","CVE-2024-43085"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2024-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-11-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/2457d4e459ee6ffd099b9ff7cce9c83119c3ce66"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2024-11-01"}]}],"versions":["15-next"],"ecosystem_specific":{"spl":"2024-11-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7c6ec68537ba8abf798afd9ab7c3e5889841171f","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":false,"digest":{"line_hashes":["296625860436914854122118001554626861007","78591271064963485081635982432654240084","96984731508178923318459843292183940344","73495414660657096950438272839323314432","266368202020279763643946413622106401355","108524734075640299277293291048035489345","5518621410266624112116420170662109165","273742428083560993362560509933858722495","222353554629952858307528742508185316425","311437237515890210155099304585149563556","25970352589183319051863534533797786055","313595729115024346300182506362894953285","206178075041255068443320906527741155414","140221536153661281371407326755103500234","124474614351999218944935845102626980200"],"threshold":0.9},"id":"ASB-A-353712853-2ee3f708"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7c6ec68537ba8abf798afd9ab7c3e5889841171f","target":{"function":"handleMessage","file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":false,"digest":{"length":2806,"function_hash":"52203420946377433023336902847671327104"},"id":"ASB-A-353712853-38a874d4","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7c6ec68537ba8abf798afd9ab7c3e5889841171f"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353712853.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2024-11-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/ef6f37e5292ae3491de1857751dc01a319bb61d1","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"handleMessage"},"deprecated":false,"digest":{"function_hash":"237446641465118461929782557737870425448","length":2789},"id":"ASB-A-353712853-1ea4a934","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ef6f37e5292ae3491de1857751dc01a319bb61d1","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["82539860095409532767780005366733516697","247367668906640266368830489764305696335","270166610605029388727275532461911588443","295766741956319021409471366309707414863","205591127483026183749919495093873477385","249655596625849762383609879921755249023","170767302155596183688132682282414424879","155900569156437865269117652655379277295"]},"id":"ASB-A-353712853-cdf6c919","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ef6f37e5292ae3491de1857751dc01a319bb61d1"],"severity":"High","spl":"2024-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353712853.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2024-11-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"High","spl":"2024-11-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":false,"digest":{"line_hashes":["82539860095409532767780005366733516697","247367668906640266368830489764305696335","270166610605029388727275532461911588443","295766741956319021409471366309707414863","205591127483026183749919495093873477385","249655596625849762383609879921755249023","170767302155596183688132682282414424879","155900569156437865269117652655379277295"],"threshold":0.9},"id":"ASB-A-353712853-d08059c0","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/643bea502a92329e72585050fb7fa5535456094f"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/643bea502a92329e72585050fb7fa5535456094f","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"handleMessage"},"deprecated":false,"digest":{"length":2789,"function_hash":"237446641465118461929782557737870425448"},"id":"ASB-A-353712853-ff3c753e","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/643bea502a92329e72585050fb7fa5535456094f"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353712853.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2024-11-01"}]}],"versions":["15"],"ecosystem_specific":{"types":["EoP"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f927d03008b4acd7616c9a2dfbac62bac6983a7c"],"severity":"High","spl":"2024-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353712853.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-11-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/aec6c731bfdbe7f0fe537948563a7aeee5cf05e2","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":false,"digest":{"line_hashes":["82539860095409532767780005366733516697","247367668906640266368830489764305696335","270166610605029388727275532461911588443","295766741956319021409471366309707414863","205591127483026183749919495093873477385","249655596625849762383609879921755249023","170767302155596183688132682282414424879","155900569156437865269117652655379277295"],"threshold":0.9},"id":"ASB-A-353712853-36d9ace0","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/aec6c731bfdbe7f0fe537948563a7aeee5cf05e2","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"handleMessage"},"deprecated":false,"digest":{"length":2790,"function_hash":"276251499281960789647196136559449074585"},"id":"ASB-A-353712853-6b7a06bd"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/aec6c731bfdbe7f0fe537948563a7aeee5cf05e2"],"severity":"High","spl":"2024-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353712853.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-11-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/37be5d18e529877fcd3c62063aec205a96660449"],"severity":"High","spl":"2024-11-01","types":["EoP"],"vanir_signatures":[{"digest":{"length":2806,"function_hash":"52203420946377433023336902847671327104"},"id":"ASB-A-353712853-0eb803c0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/37be5d18e529877fcd3c62063aec205a96660449","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java","function":"handleMessage"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/37be5d18e529877fcd3c62063aec205a96660449","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"deprecated":false,"digest":{"line_hashes":["273742428083560993362560509933858722495","222353554629952858307528742508185316425","311437237515890210155099304585149563556","25970352589183319051863534533797786055","313595729115024346300182506362894953285","206178075041255068443320906527741155414","140221536153661281371407326755103500234","124474614351999218944935845102626980200"],"threshold":0.9},"id":"ASB-A-353712853-6481881c"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353712853.json"}}],"schema_version":"1.9.0"}