Oneplus
48 known vulnerabilities
Top Products
A remote code execution vulnerability in the webview component of OnePlus Store app.
OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authori
An issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA. The firmware was found to contain functionality t
An issue was discovered in OnePlus One, X, 2, 3, 3T, and 5 devices with OxygenOS 5.0 and earlier. The attacker can reboo
The OnePlus 2 Primary Bootloader (PBL) does not validate the SBL1 partition before executing it, although it contains a
An issue was discovered on OnePlus One and X devices. Due to a lenient updater-script on the OnePlus One and X OTA image
An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. Due to a lenient updater-script in the OnePlus OTA imag
An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. OxygenOS and HydrogenOS are vulnerable to downgrade att
An issue was discovered on OnePlus devices such as the 3T. The OnePlus OTA Updater pushes the signed-OTA image over HTTP
In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partiall
With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts wit
An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of th
OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that al
An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T. The attacker can persistently make the (locked) b
An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the
Frequently Asked Questions
How many CVEs affect Oneplus?
Oneplus has 48 CVE records in our database, including 8 critical and 6 high severity vulnerabilities.
What are the most severe Oneplus vulnerabilities?
Oneplus has 8 critical severity (CVSS 9.0+) and 6 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Oneplus vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Oneplus products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Oneplus Vulnerabilities
CyberStrike scans your infrastructure for Oneplus vulnerabilities and provides real-time remediation guidance.
Get Started