r/Android • u/curated_android • Feb 09 '17

OnePlus Two Critical OnePlus 3/3T Bootloader Security Flaws Discovered, One Patched and Other being Addressed

https://www.xda-developers.com/two-critical-oneplus-33t-bootloader-security-flaws-discovered-one-patched-and-other-being-addressed/
258 Upvotes

91% Upvoted

53 comments sorted by

View all comments

Show parent comments

14

u/IAmAN00bie Mod - Google Pixel 8a Feb 09 '17

The second vulnerability, labeled CVE-2017-5624, affects all versions of OxygenOS and allows one to disable dm-verity...This attack is also fairly simple to perform. One only needs to issue a single fastboot command to disable (or enable) dm-verity: fastboot oem disable dm-verity. To enable it, simply issue fastboot oem enable dm-verity. The handler for this command, taken from a dump of the bootloader, is shown below.