CVE-2026-70387 | OnePlus OxygenOS up to 15.0.0.1999/16.0.5.1199/16.1.10.499 olc2 logging HAL getCallingUid cmd improper authorization

October 21, 2026 Yanac

A vulnerability was found in OnePlus OxygenOS up to 15.0.0.1999/16.0.5.1199/16.1.10.499. It has been classified as critical. This affects the function getCallingUid of the component olc2 logging HAL. This manipulation of the argument cmd causes improper authorization.

This vulnerability appears as CVE-2026-70387. The attack requires local access. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More