Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Oneplus

48 known vulnerabilities

3
CRITICAL
3
HIGH
9
MEDIUM

Top Products

oxygenos 11 oneplus 3t 10 oneplus 3 9 oneplus 2 4 oneplus one 4 oneplus x 4 store 1 app locker 1 oneplus 7 pro firmware 1 oneplus 7 pro 1
15 CVEs
7.4
CVE-2023-26309

A remote code execution vulnerability in the webview component of OnePlus Store app.

4.6
CVE-2020-13626

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authori

6.0
CVE-2020-7958

An issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA. The firmware was found to contain functionality t

6.8
CVE-2017-5947

An issue was discovered in OnePlus One, X, 2, 3, 3T, and 5 devices with OxygenOS 5.0 and earlier. The attacker can reboo

9.8
CVE-2017-11105

The OnePlus 2 Primary Bootloader (PBL) does not validate the SBL1 partition before executing it, although it contains a

5.9
CVE-2017-8851

An issue was discovered on OnePlus One and X devices. Due to a lenient updater-script on the OnePlus One and X OTA image

5.9
CVE-2017-8850

An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. Due to a lenient updater-script in the OnePlus OTA imag

5.9
CVE-2017-5948

An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. OxygenOS and HydrogenOS are vulnerable to downgrade att

7.5
CVE-2016-10370

An issue was discovered on OnePlus devices such as the 3T. The OnePlus OTA Updater pushes the signed-OTA image over HTTP

4.6
CVE-2017-5625

In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partiall

5.9
CVE-2017-5622

With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts wit

6.6
CVE-2017-5623

An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of th

9.8
CVE-2017-5626

OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that al

9.8
CVE-2017-5624

An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T. The attacker can persistently make the (locked) b

8.1
CVE-2017-5554

An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the

Frequently Asked Questions

How many CVEs affect Oneplus?

Oneplus has 48 CVE records in our database, including 8 critical and 6 high severity vulnerabilities.

What are the most severe Oneplus vulnerabilities?

Oneplus has 8 critical severity (CVSS 9.0+) and 6 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.

How can I scan for Oneplus vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Oneplus products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Oneplus Vulnerabilities

CyberStrike scans your infrastructure for Oneplus vulnerabilities and provides real-time remediation guidance.

Get Started