VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 12, 2017· Updated Jun 17, 2026

CVE-2017-5624

CVE-2017-5624

Description

An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T. The attacker can persistently make the (locked) bootloader start the platform with dm-verity disabled, by issuing the 'fastboot oem disable_dm_verity' command. Having dm-verity disabled, the kernel will not verify the system partition (and any other dm-verity protected partition), which may allow for persistent code execution and privilege escalation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Oneplus/Oxygenos2 versions
    cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:oneplus:oxygenos:*:*:*:*:*:*:*:*range: <=4.0.2
    • (no CPE)range: <4.0.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.