Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Oppo — Vulnerabilities & Security Advisories 13

Browse all 13 CVE security advisories affecting Oppo. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oppo, a major consumer electronics manufacturer, primarily produces smartphones and related devices, with its products running custom Android operating systems. Historically, Oppo devices have been vulnerable to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from improper input validation and insecure default configurations. Security researchers have identified multiple instances of pre-installed applications with exploitable flaws, and some Oppo devices have been found to contain hardcoded credentials, creating persistent security risks. The company's 11 recorded CVEs highlight ongoing challenges in securing its software ecosystem, particularly in third-party components and firmware implementations.

CVE ID Title CVSS Severity Published
CVE-2026-22072 Arbitrary URL Loading in WebView Leading to Token Leakage Risk — OPPO Health CWE-20 8.3 High 2026-08-17
CVE-2026-22078 O+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability. — O+ Connect CWE-266 7.3 High 2026-06-29
CVE-2026-22070 ColorOS Assistant Path Traversal Vulnerability — ColorOS Assistant CWE-23 7.1 High 2026-04-30
CVE-2026-22077 Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet — OPPO Wallet APP 7.5AI High AI 2026-04-27
CVE-2025-27388 Arbitrary URL Loading in WebView Leading to Token Leakage Risk — OPPO HEALTH APP CWE-20 4.7AI Medium AI 2025-08-14
CVE-2025-27387 OPPO Clone Phone uses weak WPA passphrase as only means of security — ColorOS CWE-200 7.4 High 2025-06-23
CVE-2024-1609 OPPO Store APP has a WebView component privilege escalation vulnerability. — OPPP Store CWE-287 8.8 - 2024-12-25
CVE-2024-1610 OPPO Store app include remote account token hijacking and sensitive information leakage — OPPO Store APP CWE-287 8.8 - 2024-12-18
CVE-2024-1608 OPPO Usercenter Credit sdk — Usercenter Credit sdk 9.1 Critical 2024-02-20
CVE-2023-26311 A remote code execution vulnerability in the webview component of OPPO Store app. — OPPO Store 7.4 High 2023-08-10
CVE-2023-26309 A remote code execution vulnerability in the webview component — OnePlus Store 7.4 High 2023-08-10
CVE-2023-26310 Command Injection In OPPO Service — OPPO Find X3 CWE-88 7.4 High 2023-08-09
CVE-2020-11828 OPPO ColorOS 信息泄露漏洞 — Color OS 5.5 - 2020-04-21

This page lists every published CVE security advisory associated with Oppo. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.