Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

A security vulnerability in OnePlus devices allows installed Android apps to gain root access without requiring special permissions. This is made possible by chaining two flaws in OnePlus's software, as demonstrated by researcher Rasmus Moorats on a OnePlus 15 running the latest OxygenOS. The flaws grant the highest level of control over the Android phone. According to OnePlus, the same vulnerabilities affect multiple other devices from the company, as well as devices from OPPO.