Security News Fix on the way for OnePlus 6 bootloader security flaw

[LASER_oneXM]

Content source

https://betanews.com/2018/06/10/oneplus-6-bootloader-security-flaw/

A security researcher has discovered a vulnerability in the OnePlus 6 bootloader. The flaw makes it possible for someone to boot arbitrary or modified images -- even if the bootloader is locked.
Exploiting the vulnerability requires someone to have physical access to the phone, and after this it is a relatively simple task to restart the handset in fastboot mode. From here is would be possible to load a modified boot image, including one that has root access.

 

[Ink]

"According to reports, OxygenOS 5.1.6 still includes the hack-friendly bootloader, so a patch might be included in OxygenOS 5.1.7."

While the chances of someone taking advantage of the exploit are in reality very slim, we're talking about fundamental Android security measures, so it's surprising that OnePlus has missed this.
OnePlus 6 has a serious security flaw, and a fix is on the way | TechRadar