OnePlus flaws let installed apps gain root without permissions

Researcher Rasmus Moorats chained two flaws in OnePlus's own software to gain root access on a OnePlus 15 running the latest OxygenOS, using a malicious app that requests no special permissions. OnePlus said the same flaws affect many of its devices and OPPO phones, but no patch has been released.

• Root achieved on OnePlus 15 with latest OxygenOS
• The malicious app needs no special permissions
• Flaws also affect OPPO devices, OnePlus said
• No patch released at the time of publication