What’s Vulnerable › Vulnerabilities
CVE-2017-5625
- Severity: medium (CVSS 4.6 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-04-25 · updated 2026-06-17
- Weakness: CWE-476
Description
In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertext content of an arbitrary partition (except 'keystore') by issuing the 'fastboot oem dump <partition>' fastboot command.
Affected products
- OnePlus OxygenOS: through 4.0.2
References
Get alerted when CVE-2017-5625 or the next vulnerability affects your stack