HTTP Transport Layer Vulnerability in OnePlus OTA Updater

CVE-2016-10370

What is CVE-2016-10370?

A vulnerability has been identified in the OnePlus OTA Updater affecting devices such as the OnePlus 3T. The issue stems from the Updater pushing signed OTA images over an unsecured HTTP connection instead of using TLS. This approach opens the door for potential remote exploitation of other vulnerabilities, thereby increasing the attack surface. While the digital signature on the OTA images prevents arbitrary installations, the lack of secure transmission could allow attackers to exploit other existing vulnerabilities on the device.

References