CVE-2026-70387

This vulnerability exists in OnePlus OxygenOS on Android due to an Exposed Dangerous Method and Incorrect Authorization in the olc2 logging HAL . The HAL exposes a binder method that forks and executes a shell command (execl) using a caller-supplied string. The system only verifies that the calli...