CVE-2017-5554

An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the fastboot mode, which could be done without any authentication. A physical attacker can press the "Volume Up" button during device boot, where an attacker with ADB access can issue the adb reboot bootloader command. Then, the attacker can put the platform's SELinux in permissive mode, which severely weakens it, by issuing: fastboot oem selinux permissive.

• CWE-287

• http://www.securityfocus.com/bid/95706Third Party Advisory, VDB Entry
• https://securityresear.ch/2017/01/11/fastboot-oem-selinux-permissive/Third Party Advisory
• https://www.xda-developers.com/oneplus-33t-bootloader-vulnerability-allows-changing-of-selinux-to-permissive-mode-in-fastboot/Third Party Advisory
• http://www.securityfocus.com/bid/95706Third Party Advisory, VDB Entry
• https://securityresear.ch/2017/01/11/fastboot-oem-selinux-permissive/Third Party Advisory
• https://www.xda-developers.com/oneplus-33t-bootloader-vulnerability-allows-changing-of-selinux-to-permissive-mode-in-fastboot/Third Party Advisory

Published

Jan 23, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5548drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x bef…
• CVE-2017-5549The klsi_105_get_line_state function in drivers/usb/serial/k…
• CVE-2017-5550Off-by-one error in the pipe_advance function in lib/iov_ite…
• CVE-2017-5551The simple_set_acl function in fs/posix_acl.c in the Linux k…
• CVE-2017-5552Memory leak in the virgl_resource_attach_backing function in…6.5
• CVE-2017-5553Cross-site scripting (XSS) vulnerability in plugins/markdown…
• CVE-2017-5556The ConvertToPDF plugin in Foxit Reader before 8.2 and Phant…
• CVE-2017-5563LibTIFF version 4.0.7 is vulnerable to a heap-based buffer o…
• CVE-2017-5565Code injection vulnerability in Trend Micro Maximum Security…
• CVE-2017-5566Code injection vulnerability in AVG Ultimate 17.1 (and earli…
• CVE-2017-5567Code injection vulnerability in Avast Premier 12.3 (and earl…
• CVE-2017-5569An issue was discovered in eClinicalWorks Patient Portal 7.0…