In Oppo's battery application, the third-party SDK provides the function of loading a…
Priority LOW 33Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be used.
Why it matters now
EPSS 0.00111 1st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | OPPO Android Phone with Qualcomm chipset | OPPO Mobile phones with Qualcomm chipset and Android 11 versions | — | No fix listed | CNA |
- OPPO Android Phone with Qualcomm chipset Vendor— Affected OPPO Mobile phones with Qualcomm chipset and Android 11 versions Fixed in — No fix listed CNA
CPE configurations NVD · 38
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* | 11.0 | Vulnerable | |
| cpe:2.3:h:oppo:oppo_a12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a15s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a31:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a33:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a5_2020:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a52:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a53:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a54_5g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
- cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Google
- cpe:2.3:h:oppo:oppo_a12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a15s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a31:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a33:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a5_2020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a52:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a53:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a54_5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
Show 28 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:oppo:oppo_a73_5g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a74_5g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a9_2020:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a91:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a92:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a93:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_a94:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_f11_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_f11_pro:-:*:*:*:marvel\'s_avengers:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_find_x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_find_x_lamborghini:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_find_x2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_find_x2_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_find_x2_pro:-:*:*:*:automobili_lamborghini:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_find_x3_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_reno:-:*:*:*:fc_barcelona:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_reno_10x_zoom:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_reno_5g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_reno_z:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_reno3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_reno3_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_reno4_5g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_reno4_pro_5g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_reno4_z_5g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_reno5_4g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_reno5_5g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_reno5_pro_5g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
| cpe:2.3:h:oppo:oppo_x_2021:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OPPO |
- cpe:2.3:h:oppo:oppo_a73_5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a74_5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a9_2020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a91:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a92:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a93:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_a94:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_f11_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_f11_pro:-:*:*:*:marvel\'s_avengers:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_find_x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_find_x_lamborghini:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_find_x2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_find_x2_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_find_x2_pro:-:*:*:*:automobili_lamborghini:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_find_x3_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_reno:-:*:*:*:fc_barcelona:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_reno_10x_zoom:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_reno_5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_reno_z:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_reno3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_reno3_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_reno4_5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_reno4_pro_5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_reno4_z_5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_reno5_4g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_reno5_5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_reno5_pro_5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
- cpe:2.3:h:oppo:oppo_x_2021:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OPPO
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-23243
- 2026-10-03 Alias added: GHSA-fwfw-qrv2-xvwq
References
More Google Android vulnerabilities
- TI-2026-42236 Improper authorization in Google Android KEVCVSS 3.1HIGH 8.8
- TI-2025-30821 Use after free in Google Android KEVCVSS 3.1HIGH 8.8
- TI-2023-17777 Improper privilege management in Google Android KEVCVSS 3.1HIGH 8.8
- TI-2025-30872 Integer overflow in Google Android KEVCVSS 3.1HIGH 8.4
- TI-2024-21766 there is a possible way to bypass due to a logic error in the code. KEVCVSS 3.1HIGH 8.1
- TI-2025-30849 Missing authentication in Google Android KEVCVSS 3.1HIGH 7.8
Sources
- CVE-2021-23243 · CVE Program
- CVE-2021-23243 · NVD
- FIRST EPSS
- GHSA-fwfw-qrv2-xvwq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences