@thecybersecguru@infosec.exchange
2026-09-26 15:24 UTC
🚨 OnePlus 15: Zero-Permission Root Exploit
Security research has uncovered an exploit chain affecting the OnePlus 15 that can take an untrusted Android app to root (UID 0) without requiring any special permissions.
The chain abuses vulnerable OxygenOS components, including AtlasService and the olc2 vendor HAL, allowing an installed app to bypass Android’s normal permission boundaries.
Key points:
• Zero Android permissions required
• Tested on a stock OnePlus 15
• OxygenOS 16 affected
• Local privilege escalation to root
• No public PoC was initially available
• Broader OnePlus/OPPO impact is being investigated
Technical breakdown:
https://thecybersecguru.com/news/oneplus-15-zero-permission-root-exploit/
#InfoSec #CyberSecurity #AndroidSecurity #OnePlus #OxygenOS #MobileSecurity #PrivilegeEscalation
Replies (0)
No replies.