Oppo Coloros
6 CVEs affecting Oppo Coloros. Latest disclosed: 2025-06-23. Critical: 1, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-11829 | Critical | 9.8 | 2020-11-19 | Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.0_5493e40_200722. |
CVE-2021-23244 | High | 7.8 | 2021-12-27 | ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed… |
CVE-2021-23246 | High | 7.5 | 2022-03-11 | In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosure. |
CVE-2020-11828 | High | 7.5 | 2020-04-21 | In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), RGB is defined on th… |
CVE-2025-27387 | High | 7.4 | 2025-06-23 | OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure. |
CVE-2023-26310 | High | 7.4 | 2023-08-09 | There is a command injection problem in the old version of the mobile phone backup app. |