TI-2023-11465 CVE-2023-26310 · GHSA-wm73-m5xh-qj3h
Command Injection In OPPO Service
Priority MEDIUM 44
There is a command injection problem in the old version of the mobile phone backup app.
OPPO
Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9
Exploited now
OPPO records in CISA KEVNo OPPO vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Coloros · all components
TI-2020-09500 CVE-2020-11829 · GHSA-88jq-f6jw-8w6c
Dynamic loading of services in the backup and restore SDK leads to elevated privileges…
Priority MEDIUM 44
Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.0_5493e40_200722.
TI-2021-05995 CVE-2021-23246 · GHSA-653j-qm23-h5j5
In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission…
Priority LOW 35
In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosure.
TI-2021-05994 CVE-2021-23244 · GHSA-9m64-9g8r-6vh6
ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named…
Priority LOW 35
ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the same package name to obta…
TI-2020-09499 CVE-2020-11828 · GHSA-6mcg-qcwq-jvvg
Use of uninitialized resource in OPPO Color OS
Priority LOW 35
In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), RGB is defined on the stack but uninitialized, so when the screenShot function to…