CVE-2017-5625

In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertext content of an arbitrary partition (except ‘keystore’) by issuing the ‘fastboot oem dump ‘ fastboot command.

Date published : 2017-04-25

https://alephsecurity.com/vulns/aleph-2017006