TI-2026-78561 CVE-2026-70387 · GHSA-cwgc-9268-23h4
Command execution in OnePlus OxygenOS via exposed logging HAL method
Priority LOW 38
Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android.
Vulnerabilities
18 records
TI-2026-78560 CVE-2026-70386 · GHSA-mmh8-7mj5-vp22
OnePlus OxygenOS improper neutralization of special elements vulnerability
Priority HIGH 72
Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vulnerability in OnePlus OxygenOS on Android.
TI-2025-09349 CVE-2025-10184 · GHSA-q9jj-p5hc-gfmj
OnePlus OxygenOS Telephony provider permission bypass
Priority HIGH 69
The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider without permission, user interaction, or consent.
TI-2023-11464 CVE-2023-26309 · GHSA-57f8-r965-2594
A remote code execution vulnerability in the webview component
Priority MEDIUM 43
A remote code execution vulnerability in the webview component of OnePlus Store app.
TI-2020-10691 CVE-2020-13626 · GHSA-cfrm-hj4c-7g9q
OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google…
Priority LOW 21
OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked.
TI-2020-06438 CVE-2020-7958 · GHSA-jcv5-c92v-jxmh
An issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA.
Priority LOW 28
An issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA.
TI-2017-03865 CVE-2017-5947 · GHSA-672w-754p-3r43
An issue was discovered in OnePlus One, X, 2, 3, 3T, and 5 devices with OxygenOS 5.0 and…
Priority LOW 30
An issue was discovered in OnePlus One, X, 2, 3, 3T, and 5 devices with OxygenOS 5.0 and earlier.
TI-2017-08167 CVE-2017-11105 · GHSA-ww5h-rmwx-55m9
The OnePlus 2 Primary Bootloader (PBL) does not validate the SBL1 partition before…
Priority MEDIUM 45
The OnePlus 2 Primary Bootloader (PBL) does not validate the SBL1 partition before executing it, although it contains a certificate.
TI-2017-06359 CVE-2017-8851 · GHSA-4c45-vj44-g553
An issue was discovered on OnePlus One and X devices.
Priority LOW 27
An issue was discovered on OnePlus One and X devices.
TI-2017-06358 CVE-2017-8850 · GHSA-84h2-3vmh-4gmw
An issue was discovered on OnePlus One, X, 2, 3, and 3T devices.
Priority LOW 27
An issue was discovered on OnePlus One, X, 2, 3, and 3T devices.
TI-2017-03866 CVE-2017-5948 · GHSA-54jw-4xpp-q62p
An issue was discovered on OnePlus One, X, 2, 3, and 3T devices.
Priority LOW 28
An issue was discovered on OnePlus One, X, 2, 3, and 3T devices.
TI-2016-08421 CVE-2016-10370 · GHSA-9c6w-x974-x348
An issue was discovered on OnePlus devices such as the 3T.
Priority LOW 35
An issue was discovered on OnePlus devices such as the 3T.
TI-2017-03627 CVE-2017-5625 · GHSA-7qqc-hw29-jp6r
In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause…
Priority LOW 21
In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertext content of an arbitrary partition (except 'keystore') by issuing the 'fastboot…
TI-2017-03624 CVE-2017-5622 · GHSA-pwjc-cjmg-4g8f
With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T…
Priority LOW 26
With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts with adbd enabled.
TI-2017-03625 CVE-2017-5623 · GHSA-3jj3-7hg7-2w24
An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices.
Priority LOW 29
An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices.
TI-2017-03628 CVE-2017-5626 · GHSA-4vmj-9vqv-5mj5
OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands…
Priority MEDIUM 47
OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to lock/unlock the bootloader, disregarding the 'OEM Unlocking' checkbox, without u…
TI-2017-03626 CVE-2017-5624 · GHSA-hhqp-73g9-vq23
An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T.
Priority MEDIUM 47
An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T.
TI-2017-03568 CVE-2017-5554 · GHSA-qgrw-j67r-q423
An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2.
Priority MEDIUM 41
An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2.