CVE-2017-5625

2017-04-2516:00:00

mitre

www.cve.org

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

30.5%

JSON

In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertext content of an arbitrary partition (except ‘keystore’) by issuing the ‘fastboot oem dump <partition>’ fastboot command.

References

alephsecurity.com/vulns/aleph-2017006