OPPO vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-22072 Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.High 8.3 · Aug 17, 2026
• CVE-2026-22078 Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perform sensitive actions through the IPC chanHigh 7.3 · Jun 29, 2026
• CVE-2026-22070 ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.High 7.1 · Apr 30, 2026
• CVE-2025-27388 Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.High 8.3 · Aug 14, 2025
• CVE-2025-27387 OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure.High 7.4 · Jun 23, 2025
• CVE-2024-1609 In OPPOStore iOS App, there's a possible escalation of privilege due to improper input validation.High 8.7 · Dec 24, 2024
• CVE-2024-1610 In OPPO Store APP, there's a possible escalation of privilege due to improper input validation.High 8.7 · Dec 18, 2024
• CVE-2024-1608 In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission check, This could lead to application internal information leaCritical 9.1 · Feb 20, 2024
• CVE-2023-26311 A remote code execution vulnerability in the webview component of OPPO Store app.High 7.4 · Aug 10, 2023
• CVE-2023-26309 A remote code execution vulnerability in the webview component of OnePlus Store app.High 7.4 · Aug 10, 2023
• CVE-2023-26310 There is a command injection problem in the old version of the mobile phone backup app.High 7.4 · Aug 9, 2023
• CVE-2021-23247 A command injection vulerability found in quick game engine allows arbitrary remote code in quick app.Critical 9.8 · Apr 1, 2022
• CVE-2021-23246 In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosure.High 7.5 · Mar 11, 2022
• CVE-2021-23244 ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, High 7.8 · Dec 27, 2021
• CVE-2020-11831 OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1.Critical 9.8 · Nov 19, 2020
• CVE-2020-11830 QualityProtect has a vulnerability to execute arbitrary system commands, affected product is com.oppo.qualityprotect V2.0.Critical 9.8 · Nov 19, 2020
• CVE-2020-11829 Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.0_5493e40_200722.Critical 9.8 · Nov 19, 2020
• CVE-2020-11828 In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), RGB is defined on theHigh 7.5 · Apr 21, 2020
• CVE-2018-14996 The Oppo F5 Android device with a build fingerprint of OPPO/CPH1723/CPH1723:7.1.1/N6F26Q/1513597833:user/release-keys contains a pre-installed platform app withHigh 7.8 · Apr 25, 2019