Oppo vulnerabilities

Products

• Coloros 7
• Find X2 Pro Firmware 4
• Reno3 Pro Firmware 4

Newest

• oppo health Arbitrary URL Loading in WebView Leading to Token Leakage Risk CVE-2026-22072 8.3 HighAugust 17, 2026
• oppo o+ connect O+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability. CVE-2026-22078 7.3 HighJune 29, 2026
• oppo coloros assistant ColorOS Assistant Path Traversal Vulnerability CVE-2026-22070 7.1 HighApril 30, 2026
• oppo wallet app Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet CVE-2026-22077 5.6 MediumApril 27, 2026
• coloros Application Installation Source Verification Flaw May Lead to Risk Detection Bypass CVE-2025-27389 5.1 MediumDecember 5, 2025
• oppo health app Arbitrary URL Loading in WebView Leading to Token Leakage Risk CVE-2025-27388 8.3 HighAugust 14, 2025
• oppo coloros OPPO Clone Phone uses weak WPA passphrase as only means of security CVE-2025-27387 7.4 HighJune 23, 2025
• oppo oppp store OPPO Store APP has a WebView component privilege escalation vulnerability. CVE-2024-1609 8.7 HighDecember 25, 2024
• oppo store app OPPO Store app include remote account token hijacking and sensitive information leakage CVE-2024-1610 8.7 HighDecember 18, 2024
• oppo usercenter credit sdk, usercenter credit software development kit +1 more OPPO Usercenter Credit sdk CVE-2024-1608 9.1 CriticalFebruary 20, 2024
• oppo store A remote code execution vulnerability in the webview component of OPPO Store app. CVE-2023-26311 7.4 HighAugust 10, 2023
• oneplus store, oppo oneplus store +1 more A remote code execution vulnerability in the webview component CVE-2023-26309 7.4 HighAugust 10, 2023
• oppo coloros, find x3 +1 more Command Injection In OPPO Service CVE-2023-26310 7.4 HighAugust 9, 2023
• oppo quick app A command injection vulerability found in quick game engine allows arbitrary remote code in quick... CVE-2021-23247 9.8 CriticalApril 1, 2022
• oppo coloros In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission... CVE-2021-23246 7.5 HighMarch 11, 2022
• oppo coloros ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default... CVE-2021-23244 7.8 HighDecember 27, 2021
• oppo find x2 pro firmware, reno3 pro firmware +1 more In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_da9313.c, failure to check... CVE-2020-11835 5.5 MediumDecember 31, 2020
• oppo find x2 pro firmware, reno3 pro firmware +1 more In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_vooc.c, the function... CVE-2020-11834 5.5 MediumDecember 31, 2020
• oppo find x2 pro firmware, reno3 pro firmware +1 more In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_mp2650.c, the function... CVE-2020-11833 5.5 MediumDecember 31, 2020
• oppo find x2 pro firmware, reno3 pro firmware +1 more In functions charging_limit_current_write and charging_limit_time_write in /SM8250_Q_Master... CVE-2020-11832 5.5 MediumDecember 31, 2020
• oppo ovoicemanager OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected... CVE-2020-11831 9.8 CriticalNovember 19, 2020
• oppo qualityprotect QualityProtect has a vulnerability to execute arbitrary system commands, affected product is com... CVE-2020-11830 9.8 CriticalNovember 19, 2020
• oppo coloros Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected... CVE-2020-11829 9.8 CriticalNovember 19, 2020
• oppo coloros, color os +1 more In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position... CVE-2020-11828 7.5 HighApril 21, 2020
• oppo f5 firmware The Oppo F5 Android device with a build fingerprint of OPPO/CPH1723/CPH1723:7.1.1/N6F26Q... CVE-2018-14996 7.8 HighApril 25, 2019