CVE-2017-8851

CVE-2017-8851 affects OnePlus One and X devices, stemming from a lenient updater-script and shared verification keys/system properties that allow attackers to install incorrect Over-The-Air (OTA) updates across these models. This vulnerability, rated Medium severity (CVSS 5.9), can be exploited via Man-in-the-Middle attacks during the unencrypted update process or physically through ADB sideloading in recovery mode. Successful exploitation could lead to an expanded attack surface, unpatched vulnerabilities, or render the device unusable, requiring a factory reset. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.