Unpatched OnePlus and OPPO vulnerabilities let apps gain root access

A chain of two software vulnerabilities described by a researcher allows a malicious app installed on a phone to gain root access without special permissions. OnePlus confirmed in May that the flaws also affect many more OnePlus and OPPO devices, but did not specify which ones. At the time of disclosure, no fix had been released, and there was no evidence that the flaws had been used in a real-world attack.