Security researcher Rasmus Moorats found that a OnePlus 15 phone running the latest OxygenOS can be fully rooted by an ordinary app that requests no special permissions at all, by chaining together two separate flaws in OnePlus's own software stack. OnePlus has confirmed the same underlying issues extend well beyond this one device, hitting a wide range of its phones as well as OPPO models, but a fix has not yet shipped. Until patches land, installing any untrusted app on an affected device risks handing it full administrative control.
// source: thehackernews.com ↗