Mmastodon TechnologyMobile first seen 7 h ago, last 7 h ago, peak #3

OnePlus 15 root exploit via audio debug service detailed

Original: I'm reading Ramsus Moorats' article on how to "Getting root on OnePlus 15 from an untrusted app, via an audio debug serv

Security researcher Rasmus Moorats has published an article describing how to gain root on the OnePlus 15 from an untrusted app, exploiting an audio debug service and a vendor HAL. The write-up includes a notably dismissive response from OnePlus' PSIRT security team, which reportedly told the researcher that without official written authorisation the issue would not be addressed, sparking criticism of the company's vulnerability handling.

Why now: The severity of the exploit and OnePlus' security team's dismissive response are drawing attention from the infosec community.

OnePlusOnePlus 15Rasmus MooratsOnePlus PSIRT

Open on mastodon →

Evidence

• I'm reading Ramsus Moorats' article on how to "Getting root on OnePlus 15 from an untrusted app, via an audio debug service and a vendor HAL" [1], and in that I find an incredible response from OnePlus' PSIRT team [2]: > Kindly be reminded that without our official written… · vmcall@infosec.exchange

API: https://socialmediatrends-api.osmike.com/v1/trends/879243