Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

Two unpatched OnePlus flaws let an installed no-permission app gain root on stock OxygenOS phones; no real-world exploitation is known.