CVE-2017-5625

4.6 mediumEPSS 0.3%

Medium (4.6) in oneplus oxygenos. EPSS 0.3% chance of exploitation in the next 30 days.

In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertext content of an arbitrary partition (except 'keystore') by issuing the 'fastboot oem dump <partition>' fastboot command.

Severity

CVSS 3.0

4.6 medium

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2017-04-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oneplus:oxygenos

References

https://alephsecurity.com/vulns/aleph-2017006
https://alephsecurity.com/vulns/aleph-2017006

Check your stack JSON