Known Vulnerabilities for products from Oppo

Listed below are 16 of the newest known vulnerabilities associated with the vendor "Oppo".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Additional devices specifications by Oppo can be found at device.report : Oppo

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-22077 json Not Provided 2026-04-27 2026-04-27
CVE-2023-26311 json A remote code execution vulnerability in the webview component of OPPO Store app. 9.8 - CRITICAL 2023-08-10 2023-08-15
CVE-2023-26310 json There is a command injection problem in the old version of the mobile phone backup app. 9.8 - CRITICAL 2023-08-09 2023-08-14
CVE-2021-23247 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 9.8 - CRITICAL 2022-04-01 2022-04-09
CVE-2021-23246 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 7.5 - HIGH 2022-03-11 2022-03-18
CVE-2021-23244 json ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some a... 7.8 - HIGH 2021-12-27 2022-07-12
CVE-2021-23243 json In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be used... 7.8 - HIGH 2021-09-27 2022-05-03
CVE-2020-11836 json OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell... 5.5 - MEDIUM 2021-02-06 2021-02-08
CVE-2020-11835 json In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_da9313.c, failure to check the parameter buf in the func... 5.5 - MEDIUM 2020-12-31 2021-01-06
CVE-2020-11834 json In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_vooc.c, the function proc_fastchg_fw_update_write in proc_fastchg_f... 5.5 - MEDIUM 2020-12-31 2021-01-06
CVE-2020-11833 json In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_mp2650.c, the function mp2650_data_log_write in mp2650_d... 5.5 - MEDIUM 2020-12-31 2021-01-06
CVE-2020-11832 json In functions charging_limit_current_write and charging_limit_time_write in /SM8250_Q_Master/android/vendor/oppo_charger/oppo/... 5.5 - MEDIUM 2020-12-31 2021-01-06
CVE-2020-11831 json OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicema... 9.8 - CRITICAL 2020-11-19 2020-12-04
CVE-2020-11830 json QualityProtect has a vulnerability to execute arbitrary system commands, affected product is com.oppo.qualityprotect V2.0. 9.8 - CRITICAL 2020-11-19 2020-12-02
CVE-2020-11829 json Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codeb... 9.8 - CRITICAL 2020-11-19 2021-07-21
CVE-2020-11828 json In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surface... 7.5 - HIGH 2020-04-21 2021-07-21
CVE-2018-14996 json The Oppo F5 Android device with a build fingerprint of OPPO/CPH1723/CPH1723:7.1.1/N6F26Q/1513597833:user/release-keys contain... 7.8 - HIGH 2019-04-25 2019-10-03

Known software with vulnerabilities from Oppo

Type Vendor Product Version
HardwareOppoA12-
HardwareOppoA15-
HardwareOppoA15s-
HardwareOppoA31-
HardwareOppoA33-
HardwareOppoA5-
HardwareOppoA52-
HardwareOppoA53-
HardwareOppoA9-
Operating
System
OppoColoros-
HardwareOppoF15-
HardwareOppoF17-
HardwareOppoF17 Pro-
ApplicationOppoOvoicemanager2.0.1
ApplicationOppoQualityprotect2.0
HardwareOppoReno 2-
HardwareOppoReno 2f-
HardwareOppoReno 2z-
HardwareOppoReno 3 Pro-
HardwareOppoReno 4 Pro-