EUVD-2021-26060

Malware in sbrugna...

CVE-2021-39703

In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2024-43085

The CVE-2024-43085 entry concerns Android’s UsbDeviceManager.java: In handleMessage a logic error could allow local privilege escalation by reading device contents over USB without unlocking, with no user interaction required. Affected component is the Android USB subsystem; impact is local eleva...

CVE-2024-43085

In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f...

PT-2024-30285

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the code of UsbDeviceManager.java allows for local escalation of privilege with no additional execution privileges needed. This issue could enable access to device contents...

ASB-A-353712853

In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f...

CVE-2021-39703

In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-39703

CVE-2021-39703 affects Android 12 through a flaw in UsbDeviceManager.updateState that can cause unauthorized file access via a confused deputy, enabling local EoP with no extra execution privileges and no user interaction. Public fix references appear in Android security bulletins; patch levels 2...