Oppo SM8250 Buffer Error Vulnerability

The Oppo SM8250 is a driver for the Snapdragon 855 chip from the Chinese company Oppo. A security vulnerability exists in the Oppo charger module that stems from /SM8250QMaster/android/vendor/oppocharger/oppo/oppocharger.c not checking parameters...

Linux kernel buffer error vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A buffer error vulnerability exists in the Linux kernel, which originates in /SM8250QMaster/android/vendor/oppocharger/oppo/chargeric/oppomp2650.c The data log write function...

Oppo SM8250 Buffer Error Vulnerability

The Oppo SM8250 is a driver for the Snapdragon 855 chip from the Chinese company Oppo. OPPO has a buffer error vulnerability that originates from /SM8250QMaster/android/vendor/oppocharger/oppo/chargeric/oppoda9313.c, which fails to check the parameter buf when writing in proc working mode to writ...

CVE-2020-11831

OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1...

CVE-2020-11830

QualityProtect has a vulnerability to execute arbitrary system commands, affected product is com.oppo.qualityprotect V2.0...

OPPO Oppo QualityProtect Security Breach

OPPO Oppo QualityProtect is a security protection service for devices from OPPO Guangdong Mobile Communications OPPO, China. A security vulnerability exists in com.oppo.qualityprotect version 2.0, which stems from a vulnerability in QualityProtect to execute arbitrary system commands...

OPPO Oppo OvoiceManager Security Vulnerability

OPPO Oppo OvoiceManager is a voice management service for devices from China's OPPO Guangdong Mobile Communications OPPO. A security vulnerability exists in version 2.0.1 of com.oppo.ovoicemanager that stems from OvoiceManager having system privileges to write vulnerability reports for arbitrary...

Oppo Backup and Oppo Restore Security Vulnerabilities

OPPO Guangdong Mobile Communications Oppo Backup is a backup service for devices from OPPO Guangdong Mobile Communications, China.OPPO Guangdong Mobile Communications Oppo Restore is a recovery service for devices from OPPO Guangdong Mobile Communications, China. A security vulnerability exists i...

OPPO: RXSS in https://store.oppomobile.com/

Description: hello, there is reflected cross-site scripting in the following subdomain https://store.oppomobile.com/. Reflected cross-site scripting vulnerabilities arise when data is copied from a request and echoed into the application's immediate response in an unsafe way. An attacker can use...

OPPO ColorOS Information Disclosure Vulnerability

OPPO ColorOS is a suite of Android-based operating systems for mobile devices from China's OPPO Guangdong Mobile Communications OPPO. An information disclosure vulnerability exists in the AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP file in OPPO ColorOS. The...

Design/Logic Flaw

In ColorOS oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP, RGB is defined on the stack but uninitialized, so when the screenShot function to RGB value assignment, will not initialize the value is returned to the...

Exploit for Use After Free in Google Android

CVE-2019-2215 The following issue exists in the android-msm-wa...

New 0-Day Flaw Affecting Most Android Phones Being Exploited in the Wild

Another day, another revelation of a critical unpatched zero-day vulnerability, this time in the world's most widely used mobile operating system, Android. What's more? The Android zero-day vulnerability has also been found to be exploited in the wild by the Israeli surveillance vendor NSO...

Android - Binder Driver Use-After-Free Exploit

The following issue exists in the android-msm-wahoo-4.4-pie branch of https://android.googlesource.com/kernel/msm and possibly others: There is a use-after-free of the wait member in the binderthread struct in the binder driver at /drivers/android/binder.c. As described in the upstream commit:...

CVE-2018-14996

The Oppo F5 Android device with a build fingerprint of OPPO/CPH1723/CPH1723:7.1.1/N6F26Q/1513597833:user/release-keys contains a pre-installed platform app with a package name of com.dropboxchmod versionCode=1, versionName=1.0 that contains an exported service named...

Input validation

The Oppo F5 Android device with a build fingerprint of OPPO/CPH1723/CPH1723:7.1.1/N6F26Q/1513597833:user/release-keys contains a pre-installed platform app with a package name of com.dropboxchmod versionCode=1, versionName=1.0 that contains an exported service named...

CVE-2018-14996

The Oppo F5 Android device with a build fingerprint of OPPO/CPH1723/CPH1723:7.1.1/N6F26Q/1513597833:user/release-keys contains a pre-installed platform app with a package name of com.dropboxchmod versionCode=1, versionName=1.0 that contains an exported service named...

CVE-2018-14996

CVE-2018-14996 affects the Oppo F5 on OPPO/CPH1723 running Android 7.1.1, where a pre-installed platform app with package name com.dropboxchmod exposes an exported service DropboxChmodService . This service allows a co-located app with zero permissions to supply arbitrary commands to be executed ...

community.oppo.com XSS vulnerability

Vulnerable URL: http://community.oppo.com/id/forum.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...

account.community.oppo.com XSS vulnerability

Vulnerable URL: http://account.community.oppo.com/User/activeEmail/code/407873f1ba859254ab4de12a48c2481e59077fcc6782b/back/Ij48c2NyaXB0PmFsZXJ0KCJPUEVOQlVHQk9VTlRZIik8L3NjcmlwdD4= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS...