Saint ChoiceJacking

Technical record

Disclosed on

August 14 2025

CVE

CVE-2024-43085CVE-2024-20900

CVSS

7.8

Product

Google · Android

In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Sources: usenix.org · usenix.org