OxygenOS

A cybersecurity researcher has disclosed a zero-permission root vulnerability in OnePlus's OxygenOS, which would let a malicious app gain root access on affected Android phones without requesting any dangerous permissions. Reports say OnePlus threatened the researcher rather than quickly patching the flaw, prompting criticism from the security community over the company's disclosure handling.