CVE-2017-5625 In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertext content of an arbitrary partition (except 'keystore') by i...
MediumCVSS 4.6
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertext content of an arbitrary partition (except 'keystore') by issuing the 'fastboot oem dump <partition>' fastboot command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OnePlus OxygenOS | <= 4.0.2 | No fix listed |
References
- alephsecurity.com technical-description third-party-advisory