CVE-2020-11836

OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enforcing” or “adb shell getprop ro.vendor.aee.enforcing” return no...

Design/Logic Flaw

OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enforcing” or “adb shell getprop ro.vendor.aee.enforcing” return no...

CVE-2020-11836

OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enforcing” or “adb shell getprop ro.vendor.aee.enforcing” return no...

CVE-2020-11836

Technical details about CVE-2020-11836 are not provided in the supplied documents; no specifics on affected components, root cause, or fixes are publicly available. Monitor for updates.

Oppo Android Phone with MTK Information Disclosure Vulnerability

OPPO Oppo Android Phone with MTK is a series of OPPO Android phones with MTK chipset from OPPO Guangdong Mobile Communication OPPO Company in China, which is designed to support powerful 3D image processing technology, and outperforms the performance of other CPUs of the same class in 3D image...

CVE-2020-11834

In /SM8250QMaster/android/vendor/oppocharger/oppo/oppovooc.c, the function procfastchgfwupdatewrite in procfastchgfwupdatewrite does not check the parameter len, resulting in a vulnerability...

CVE-2020-11832

In functions charginglimitcurrentwrite and charginglimittimewrite in /SM8250QMaster/android/vendor/oppocharger/oppo/oppocharger.c have not checked the parameters, which causes a vulnerability...

CVE-2020-11835

CVE-2020-11835 affects the Oppo charger driver component at /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_da9313.c, where failure to check the parameter buf in the function proc_work_mode_write leads to a vulnerability. The NVD entry provides both CVSS v3.1 base metrics (AV:L/...

CVE-2020-11832

In functions charginglimitcurrentwrite and charginglimittimewrite in /SM8250QMaster/android/vendor/oppocharger/oppo/oppocharger.c have not checked the parameters, which causes a vulnerability...

Linux kernel buffer error vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A buffer error vulnerability exists in the Linux kernel, which originates in /SM8250QMaster/android/vendor/oppocharger/oppo/chargeric/oppomp2650.c The data log write function...

Oppo SM8250 Buffer Error Vulnerability

The Oppo SM8250 is a driver for the Snapdragon 855 chip from the Chinese company Oppo. OPPO has a buffer error vulnerability that originates from /SM8250QMaster/android/vendor/oppocharger/oppo/chargeric/oppoda9313.c, which fails to check the parameter buf when writing in proc working mode to writ...

Oppo SM8250 Buffer Error Vulnerability

The Oppo SM8250 is a driver for the Snapdragon 855 chip from the Chinese company Oppo. A security vulnerability exists in the Oppo charger module that stems from /SM8250QMaster/android/vendor/oppocharger/oppo/oppocharger.c not checking parameters...

Oppo SM8250 Buffer Error Vulnerability

The Oppo SM8250 is a driver for the Snapdragon 855 chip from the Chinese company Oppo. OPPO suffers from a buffer error vulnerability that stems from /SM8250QMaster/android/vendor/oppocharger/oppo/oppovooc.c not checking the len parameter in proc fastchg fw update write, resulting in the...

CVE-2020-11831

OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1...

CVE-2020-11830

QualityProtect has a vulnerability to execute arbitrary system commands, affected product is com.oppo.qualityprotect V2.0...

Oppo Backup and Oppo Restore Security Vulnerabilities

OPPO Guangdong Mobile Communications Oppo Backup is a backup service for devices from OPPO Guangdong Mobile Communications, China.OPPO Guangdong Mobile Communications Oppo Restore is a recovery service for devices from OPPO Guangdong Mobile Communications, China. A security vulnerability exists i...

OPPO Oppo OvoiceManager Security Vulnerability

OPPO Oppo OvoiceManager is a voice management service for devices from China's OPPO Guangdong Mobile Communications OPPO. A security vulnerability exists in version 2.0.1 of com.oppo.ovoicemanager that stems from OvoiceManager having system privileges to write vulnerability reports for arbitrary...

OPPO Oppo QualityProtect Security Breach

OPPO Oppo QualityProtect is a security protection service for devices from OPPO Guangdong Mobile Communications OPPO, China. A security vulnerability exists in com.oppo.qualityprotect version 2.0, which stems from a vulnerability in QualityProtect to execute arbitrary system commands...

OPPO: RXSS in https://store.oppomobile.com/

Description: hello, there is reflected cross-site scripting in the following subdomain https://store.oppomobile.com/. Reflected cross-site scripting vulnerabilities arise when data is copied from a request and echoed into the application's immediate response in an unsafe way. An attacker can use...

OPPO ColorOS Information Disclosure Vulnerability

OPPO ColorOS is a suite of Android-based operating systems for mobile devices from China's OPPO Guangdong Mobile Communications OPPO. An information disclosure vulnerability exists in the AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP file in OPPO ColorOS. The...