PT-2017-16628
CVE-2017-5625
·
Published
2017-04-25
·
Updated
2017-05-05
Description by
CVSS 3.1
4.6
MediumMetricsAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
OxygenOS versions prior to 4.0.3
Description
The issue allows an unauthorized attacker to partially dump the ciphertext content of an arbitrary partition, except 'keystore', by using the 'fastboot oem dump ' command. This affects OnePlus 3 and 3T devices.
Recommendations
For OxygenOS versions prior to 4.0.3, update to version 4.0.3 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾