Read the docs

OPPO

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

OPPO records in CISA KEV

No OPPO vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Coloros 5 records MEDIUM Find X2 Pro Firmware 4 records LOW Reno3 Pro Firmware 4 records LOW Coloros Assistant 1 record MEDIUM F5 Firmware 1 record LOW Oppo Store 1 record MEDIUM Ovoicemanager 1 record MEDIUM Qualityprotect 1 record MEDIUM

Records

4 records in Find X2 Pro Firmware · all components

TI-2020-09506 CVE-2020-11835 · GHSA-w998-mp46-3582

Out-of-bounds write in OPPO Find X2

Priority LOW 25

In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_da9313.c, failure to check the parameter buf in the function proc_work_mode_write in proc_work_mode_write causes a vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00328 Published 2020-12-31 No fix listed CWE-787
TI-2020-09505 CVE-2020-11834 · GHSA-9vr7-48xw-7c8q

Out-of-bounds write in OPPO Find X2

Priority LOW 25

In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_vooc.c, the function proc_fastchg_fw_update_write in proc_fastchg_fw_update_write does not check the parameter len, resulting in a vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00328 Published 2020-12-31 No fix listed CWE-787
TI-2020-09504 CVE-2020-11833 · GHSA-56cp-9m37-vqw4

Out-of-bounds write in OPPO Find X2

Priority LOW 25

In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_mp2650.c, the function mp2650_data_log_write in mp2650_data_log_write does not check the parameter len which causes a vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00328 Published 2020-12-31 No fix listed CWE-787
TI-2020-09503 CVE-2020-11832 · GHSA-q2g9-chwh-vpqj

Out-of-bounds write in OPPO Find X2

Priority LOW 25

In functions charging_limit_current_write and charging_limit_time_write in /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_charger.c have not checked the parameters, which causes a vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00328 Published 2020-12-31 No fix listed CWE-787
Open these records in search →