OPPO kayıtları

oppo üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 4
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Bug bounty kapsamı

OPPOHackerOne · ödüllü

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

18 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2021-23247İstismar yok	A command injection vulerability found in quick game engine allows arbitrary remote code in quick app.oppo · quick app · CWE-77 pre-auth RCE Komut enjeksiyonu	Kritik9,8	—	%1,8	1 Nis 2022
39İzleyin	CVE-2020-11830İstismar yok	QualityProtect has a vulnerability to execute arbitrary system commands, affected product is com.oppo.qualityprotect V2.0.oppo · qualityprotect pre-auth RCE	Kritik9,8	—	%1,5	19 Kas 2020
39İzleyin	CVE-2020-11831İstismar yok	OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1.oppo · ovoicemanager · CWE-732 Kimlik doğrulamasız	Kritik9,8	—	%1,4	19 Kas 2020
39İzleyin	CVE-2020-11829İstismar yok	Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.0_5493oppo · coloros Kimlik doğrulamasız	Kritik9,8	—	%1,1	19 Kas 2020
39İzleyin	CVE-2023-26310İstismar yok	Command Injection In OPPO Serviceoppo · coloros · CWE-88 pre-auth RCE Komut enjeksiyonu	Kritik9,8	—	%1,1	9 Ağu 2023
39İzleyin	CVE-2023-26311İstismar yok	A remote code execution vulnerability in the webview component of OPPO Store app.oppo · oppo store pre-auth RCE	Kritik9,8	—	%0,8	10 Ağu 2023
39İzleyin	CVE-2026-22070İstismar yok	ColorOS Assistant Path Traversal Vulnerabilityoppo · coloros assistant · CWE-23 Kimlik doğrulamasız Yol geçişi	Kritik9,8	—	%0,2	30 Nis 2026
31İzleyin	CVE-2021-23244İstismar yok	ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelisoppo · coloros	Yüksek7,8	—	%0,6	27 Ara 2021
31İzleyin	CVE-2018-14996İstismar yok	The Oppo F5 Android device with a build fingerprint of OPPO/CPH1723/CPH1723:7.1.1/N6F26Q/1513597833:user/release-keys contains a pre-installoppo · f5 firmware	Yüksek7,8	—	%0,5	25 Nis 2019
31İzleyin	CVE-2021-23243İstismar yok	In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be used.oppo · oppo a12	Yüksek7,8	—	%0,1	27 Eyl 2021
30İzleyin	CVE-2020-11828İstismar yok	In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), Roppo · coloros · CWE-908 Kimlik doğrulamasız Bellek hatası	Yüksek7,5	—	%1,2	21 Nis 2020
30İzleyin	CVE-2021-23246İstismar yok	In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosuroppo · coloros Kimlik doğrulamasız	Yüksek7,5	—	%1,0	11 Mar 2022
30İzleyin	CVE-2024-1608İstismar yok	OPPO Usercenter Credit sdkoppo · usercenter credit software development kit · CWE-280 Kimlik doğrulamasız	Yüksek7,5	—	%0,5	20 Şub 2024
22İzleyin	CVE-2020-11834İstismar yok	In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_vooc.c, the function proc_fastchg_fw_update_write in proc_fastchg_fw_update_write oppo · reno3 pro firmware · CWE-787 Bellek hatası Hizmet dışı bırakma	Orta5,5	—	%0,3	31 Ara 2020
22İzleyin	CVE-2020-11835İstismar yok	In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_da9313.c, failure to check the parameter buf in the function proc_work_oppo · reno3 pro firmware · CWE-787 Bellek hatası Hizmet dışı bırakma	Orta5,5	—	%0,3	31 Ara 2020
22İzleyin	CVE-2020-11833İstismar yok	In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_mp2650.c, the function mp2650_data_log_write in mp2650_data_log_write doppo · reno3 pro firmware · CWE-787 Bellek hatası Hizmet dışı bırakma	Orta5,5	—	%0,3	31 Ara 2020
22İzleyin	CVE-2020-11832İstismar yok	In functions charging_limit_current_write and charging_limit_time_write in /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_charger.c oppo · reno3 pro firmware · CWE-787 Bellek hatası Hizmet dışı bırakma	Orta5,5	—	%0,3	31 Ara 2020
22İzleyin	CVE-2020-11836İstismar yok	OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability.oppo · a12	Orta5,5	—	%0,1	5 Şub 2021

CVE-2021-23247
40Planlayın
A command injection vulerability found in quick game engine allows arbitrary remote code in quick app.
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- Komut enjeksiyonu
oppo · quick app1 Nis 2022
CVE-2020-11830
39İzleyin
QualityProtect has a vulnerability to execute arbitrary system commands, affected product is com.oppo.qualityprotect V2.0.
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
oppo · qualityprotect19 Kas 2020
CVE-2020-11831
39İzleyin
OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
oppo · ovoicemanager19 Kas 2020
CVE-2020-11829
39İzleyin
Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.0_5493
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
oppo · coloros19 Kas 2020
CVE-2023-26310
39İzleyin
Command Injection In OPPO Service
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Komut enjeksiyonu
oppo · coloros9 Ağu 2023
CVE-2023-26311
39İzleyin
A remote code execution vulnerability in the webview component of OPPO Store app.
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
oppo · oppo store10 Ağu 2023
CVE-2026-22070
39İzleyin
ColorOS Assistant Path Traversal Vulnerability
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
oppo · coloros assistant30 Nis 2026
CVE-2021-23244
31İzleyin
ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelis
YüksekCVSS 7,8İstismar yokEPSS %1
oppo · coloros27 Ara 2021
CVE-2018-14996
31İzleyin
The Oppo F5 Android device with a build fingerprint of OPPO/CPH1723/CPH1723:7.1.1/N6F26Q/1513597833:user/release-keys contains a pre-install
YüksekCVSS 7,8İstismar yokEPSS %1
oppo · f5 firmware25 Nis 2019
CVE-2021-23243
31İzleyin
In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be used.
YüksekCVSS 7,8İstismar yokEPSS %0
oppo · oppo a1227 Eyl 2021
CVE-2020-11828
30İzleyin
In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), R
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bellek hatası
oppo · coloros21 Nis 2020
CVE-2021-23246
30İzleyin
In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosur
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
oppo · coloros11 Mar 2022
CVE-2024-1608
30İzleyin
OPPO Usercenter Credit sdk
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
oppo · usercenter credit software development kit20 Şub 2024
CVE-2020-11834
22İzleyin
In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_vooc.c, the function proc_fastchg_fw_update_write in proc_fastchg_fw_update_write
OrtaCVSS 5,5İstismar yokEPSS %0
- Bellek hatası
- Hizmet dışı bırakma
oppo · reno3 pro firmware31 Ara 2020
CVE-2020-11835
22İzleyin
In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_da9313.c, failure to check the parameter buf in the function proc_work_
OrtaCVSS 5,5İstismar yokEPSS %0
- Bellek hatası
- Hizmet dışı bırakma
oppo · reno3 pro firmware31 Ara 2020
CVE-2020-11833
22İzleyin
In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_mp2650.c, the function mp2650_data_log_write in mp2650_data_log_write d
OrtaCVSS 5,5İstismar yokEPSS %0
- Bellek hatası
- Hizmet dışı bırakma
oppo · reno3 pro firmware31 Ara 2020
CVE-2020-11832
22İzleyin
In functions charging_limit_current_write and charging_limit_time_write in /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_charger.c
OrtaCVSS 5,5İstismar yokEPSS %0
- Bellek hatası
- Hizmet dışı bırakma
oppo · reno3 pro firmware31 Ara 2020
CVE-2020-11836
22İzleyin
OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability.
OrtaCVSS 5,5İstismar yokEPSS %0
oppo · a125 Şub 2021