Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

Researcher Rasmus Moorats chained two flaws in OnePlus's own software to gain root access on a OnePlus 15 running the latest OxygenOS, without any special permissions. A malicious app installed by the owner can exploit the unpatched vulnerabilities. OnePlus told him the same flaws affect many of its own devices and those of OPPO, though it has not yet issued a fix.