{"id":"ASB-A-353712853","details":"In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-353712853","CVE-2024-43085"],"modified":"2026-04-24T15:37:38.793646Z","published":"2024-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-11-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/2457d4e459ee6ffd099b9ff7cce9c83119c3ce66"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2024-11-01"}]}],"versions":["15-next"],"ecosystem_specific":{"types":["EoP"],"severity":"High","vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["296625860436914854122118001554626861007","78591271064963485081635982432654240084","96984731508178923318459843292183940344","73495414660657096950438272839323314432","266368202020279763643946413622106401355","108524734075640299277293291048035489345","5518621410266624112116420170662109165","273742428083560993362560509933858722495","222353554629952858307528742508185316425","311437237515890210155099304585149563556","25970352589183319051863534533797786055","313595729115024346300182506362894953285","206178075041255068443320906527741155414","140221536153661281371407326755103500234","124474614351999218944935845102626980200"]},"deprecated":false,"id":"ASB-A-353712853-2ee3f708","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/7c6ec68537ba8abf798afd9ab7c3e5889841171f","signature_version":"v1"},{"digest":{"length":2806,"function_hash":"52203420946377433023336902847671327104"},"deprecated":false,"id":"ASB-A-353712853-38a874d4","target":{"function":"handleMessage","file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/7c6ec68537ba8abf798afd9ab7c3e5889841171f","signature_version":"v1"}],"spl":"2024-11-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/7c6ec68537ba8abf798afd9ab7c3e5889841171f"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353712853.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2024-11-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"severity":"High","vanir_signatures":[{"digest":{"length":2789,"function_hash":"237446641465118461929782557737870425448"},"deprecated":false,"id":"ASB-A-353712853-1ea4a934","target":{"function":"handleMessage","file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/ef6f37e5292ae3491de1857751dc01a319bb61d1","signature_version":"v1"},{"digest":{"threshold":0.9,"line_hashes":["82539860095409532767780005366733516697","247367668906640266368830489764305696335","270166610605029388727275532461911588443","295766741956319021409471366309707414863","205591127483026183749919495093873477385","249655596625849762383609879921755249023","170767302155596183688132682282414424879","155900569156437865269117652655379277295"]},"deprecated":false,"id":"ASB-A-353712853-cdf6c919","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/ef6f37e5292ae3491de1857751dc01a319bb61d1","signature_version":"v1"}],"spl":"2024-11-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/ef6f37e5292ae3491de1857751dc01a319bb61d1"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353712853.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2024-11-01"}]}],"versions":["12L"],"ecosystem_specific":{"types":["EoP"],"severity":"High","vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["82539860095409532767780005366733516697","247367668906640266368830489764305696335","270166610605029388727275532461911588443","295766741956319021409471366309707414863","205591127483026183749919495093873477385","249655596625849762383609879921755249023","170767302155596183688132682282414424879","155900569156437865269117652655379277295"]},"deprecated":false,"id":"ASB-A-353712853-d08059c0","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/643bea502a92329e72585050fb7fa5535456094f","signature_version":"v1"},{"digest":{"length":2789,"function_hash":"237446641465118461929782557737870425448"},"deprecated":false,"id":"ASB-A-353712853-ff3c753e","target":{"function":"handleMessage","file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/643bea502a92329e72585050fb7fa5535456094f","signature_version":"v1"}],"spl":"2024-11-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/643bea502a92329e72585050fb7fa5535456094f"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353712853.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2024-11-01"}]}],"versions":["15"],"ecosystem_specific":{"types":["EoP"],"severity":"High","spl":"2024-11-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/f927d03008b4acd7616c9a2dfbac62bac6983a7c"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353712853.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-11-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["EoP"],"severity":"High","vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["82539860095409532767780005366733516697","247367668906640266368830489764305696335","270166610605029388727275532461911588443","295766741956319021409471366309707414863","205591127483026183749919495093873477385","249655596625849762383609879921755249023","170767302155596183688132682282414424879","155900569156437865269117652655379277295"]},"deprecated":false,"id":"ASB-A-353712853-36d9ace0","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/aec6c731bfdbe7f0fe537948563a7aeee5cf05e2","signature_version":"v1"},{"digest":{"length":2790,"function_hash":"276251499281960789647196136559449074585"},"deprecated":false,"id":"ASB-A-353712853-6b7a06bd","target":{"function":"handleMessage","file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/aec6c731bfdbe7f0fe537948563a7aeee5cf05e2","signature_version":"v1"}],"spl":"2024-11-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/aec6c731bfdbe7f0fe537948563a7aeee5cf05e2"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353712853.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-11-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["EoP"],"severity":"High","vanir_signatures":[{"digest":{"length":2806,"function_hash":"52203420946377433023336902847671327104"},"deprecated":false,"id":"ASB-A-353712853-0eb803c0","target":{"function":"handleMessage","file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/37be5d18e529877fcd3c62063aec205a96660449","signature_version":"v1"},{"digest":{"threshold":0.9,"line_hashes":["273742428083560993362560509933858722495","222353554629952858307528742508185316425","311437237515890210155099304585149563556","25970352589183319051863534533797786055","313595729115024346300182506362894953285","206178075041255068443320906527741155414","140221536153661281371407326755103500234","124474614351999218944935845102626980200"]},"deprecated":false,"id":"ASB-A-353712853-6481881c","target":{"file":"services/usb/java/com/android/server/usb/UsbDeviceManager.java"},"signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/37be5d18e529877fcd3c62063aec205a96660449","signature_version":"v1"}],"spl":"2024-11-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/37be5d18e529877fcd3c62063aec205a96660449"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353712853.json"}}],"schema_version":"1.7.5"}