Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [QUIET] · [TECHNOLOGY]
2 clusters · 5 sources · 15 days · First seen · Last updated
OnePlus OxygenOS security vulnerabilities
Overview
Security researcher Rasmus Moorats identified two vulnerabilities in OnePlus’s OxygenOS that enable malicious applications to obtain full root access without user authorization or alerts.
The exploit chains two components: a flaw in the AtlasService diagnostic component allows for limited root access to the dumpstate area, which is then escalated through a second flaw in the olc2 hardware management service. This escalation grants full low-level Linux privileges, including the ability to load code at the kernel level.
Tests confirmed the exploit on OnePlus 12 Pro and OnePlus 15 devices running unmodified software. While OnePlus has confirmed the vulnerabilities, the company has not yet released a patch or a CVE.
Entities
OnePlus · Rasmus Moorats · OxygenOS · Android · Linux
Timeline
-
[TECHNOLOGY] 3 sourcesAndroid rooting: definition, benefits, and security risks
Rooting Android devices grants superuser access to modify protected system files and settings, offering customization but increasing risks like malware exposure and loss of manufacturer support.
-
[TECHNOLOGY] 2 sourcesOnePlus security flaws allow unauthorized root access
Security researcher Rasmus Moorats discovered two vulnerabilities in OnePlus OxygenOS that allow apps to gain full root access without user permission by chaining flaws in the AtlasService and olc2 components.
Sources
android-mt.ouest-france.fr · canaltech.com.br · frandroid.com · hardware.com.br · spacemoney.com.br