CVE-2017-5625

CVE-2017-5625 describes a vulnerability in OxygenOS before version 4.0.3 on OnePlus 3 and 3T devices, allowing an attacker with physical access to partially dump encrypted data from most partitions via a fastboot command, even with a locked bootloader. This medium-severity vulnerability (CVSS 4.6) requires physical proximity and user interaction is not needed, but it only allows for data disclosure, not modification or denial of service. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.