CVE-2021-23244: Oppo Coloros

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the same package name to obtain dangerous permission.

Affected products

• Oppo Coloros: version 11 only

Published 2021-12-27. Last modified 2026-06-17.