209 matches found
PT-2023-20602
Name of the Vulnerable Software and Affected Versions OnePlus Store app affected versions not specified OnePlus Mall app affected versions not specified Description A remote code execution vulnerability exists in the webview component of the OnePlus Store and Mall apps. This issue allows for remo...
OPPO OnePlus Mall Security Breach
OPPO OnePlus Mall is a mobile application from OPPO Guangdong Mobile Communications OPPO, China. A security vulnerability exists in OPPO OnePlus Mall version 3.0.2023, which stems from a remote code execution RCE vulnerability in the webview component...
OnePlus8T has an information leak vulnerability
The OnePlus 8T is a smartphone. OnePlus8T has an information disclosure vulnerability. An attacker can exploit to obtain sensitive user information...
CVE-2020-13626
OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...
CVE-2020-13626
OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...
Authorization
OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...
CVE-2020-13626
OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...
CVE-2020-13626
The CVE-2020-13626 entry concerns OnePlus App Locker (up to 2020-10-06). The vulnerability allows physically proximate attackers to exploit Google Assistant to bypass an authorization check and send an SMS while the SMS app is locked. CVSS data provided: CVSS v3.1: AV=Physical, AC=Low, PR=None, U...
PT-2020-13623
Name of the Vulnerable Software and Affected Versions OnePlus App Locker versions prior to 2020-10-06 Description The issue allows physically proximate attackers to bypass an authorization check using Google Assistant. This can lead to sending an SMS message when the SMS application is locked...
CVE-2020-13626: Missing Authorization
OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...
OnePlus 7 Pro Information Disclosure Vulnerability
The OnePlus 7 Pro is a smartphone from China's Wampus Technology OnePlus. A security vulnerability exists in versions prior to OnePlus 7 Pro 10.0.3.GM21BA. The vulnerability can be exploited by an attacker to obtain a fingerprint image bitmap from the fingerprint sensor...
CVE-2020-7958
An issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA. The firmware was found to contain functionality that allows a privileged user root in the Rich Execution Environment REE to obtain bitmap images from the fingerprint sensor because of Leftover Debug Code. The issue is that the...
CVE-2020-7958
An issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA. The firmware was found to contain functionality that allows a privileged user root in the Rich Execution Environment REE to obtain bitmap images from the fingerprint sensor because of Leftover Debug Code. The issue is that the...
CVE-2020-7958
An issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA. The firmware was found to contain functionality that allows a privileged user root in the Rich Execution Environment REE to obtain bitmap images from the fingerprint sensor because of Leftover Debug Code. The issue is that the...
Design/Logic Flaw
An issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA. The firmware was found to contain functionality that allows a privileged user root in the Rich Execution Environment REE to obtain bitmap images from the fingerprint sensor because of Leftover Debug Code. The issue is that the...
CVE-2020-7958
An issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA. The firmware was found to contain functionality that allows a privileged user root in the Rich Execution Environment REE to obtain bitmap images from the fingerprint sensor because of Leftover Debug Code. The issue is that the...
CVE-2020-7958
The CVE-2020-7958 entry concerns OnePlus 7 Pro devices (prior to 10.0.3.GM21BA). A leftover-debug-code issue in the firmware allows a privileged root user in the Rich Execution Environment (REE) to obtain bitmap fingerprint images from the sensor. The root cause is that the Trusted Application (T...
PT-2020-19877
Name of the Vulnerable Software and Affected Versions OnePlus 7 Pro versions prior to 10.0.3.GM21BA Description An issue was found in the firmware of the affected devices, where a privileged user, such as a root user in the Rich Execution Environment REE, can obtain bitmap images from the...
CVE-2020-7958: Undefined Security Weakness
An issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA. The firmware was found to contain functionality that allows a privileged user root in the Rich Execution Environment REE to obtain bitmap images from the fingerprint sensor because of Leftover Debug Code. The issue is that the...
