OxygenOS 16 flaws let apps gain root access on OnePlus and Oppo phones without permissions

An app with no permissions gained root access on a bootloader locked OnePlus 15 running stock OxygenOS 16.

The attack was first tested on a OnePlus 12 Pro and uses flaws in two OxygenOS 16 components, AtlasService and olc2. OnePlus has confirmed that multiple devices from both Oppo and OnePlus are affected.

Full details:
https://www.notebookcheck.net/An-app-with-no-permissions-can-gain-root-access-on-OnePlus-and-Oppo-phones.1409406.0.html