Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
Two unpatched OnePlus flaws let an installed no-permission app gain root on stock OxygenOS phones; no real-world exploitation is known.
More info