Skip to content
OpenAdvisories

Vendor

OnePlus

3 known vulnerabilities.

Products

OxygenOS 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.4
    CVE-2026-70387

    OnePlus OxygenOS exposed dangerous method vulnerability

    Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2 logging HAL exposes a binder method that fork()'s and calls execl("/vendor/bin/sh", "sh", "-c", cmd, NULL) with a caller-supplied command s…

    OnePlus OxygenOS
  • High 8.5
    CVE-2026-70386

    OnePlus OxygenOS improper neutralization of special elements vulnerability

    Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vulnerability in OnePlus OxygenOS on Android. Any locally installed Android application, with no permissions declared and no user interaction …

    OnePlus OxygenOS
  • High 8.2
    CVE-2025-10184 Public exploit

    OnePlus OxygenOS Telephony provider permission bypass

    The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider without permission, user interaction, or consent. The user is also not notified that SMS data is being accessed. Thi…

    OnePlus OxygenOS