Definition
OEMpocalypse is a generic Android exploitation strategy published by lukas-maar (calif) that escalates from an unprivileged app (untrusted_app) to root on bootloader-locked Samsung, Xiaomi, and Oppo/OnePlus/Realme flagships by chaining OEM-specific sandbox-escape bugs with page-uaf vulnerabilities in OEM kernel drivers.
Key Points
- Strategy: Target OEM code (One UI, HyperOS, ColorOS) — not generic Linux or chipset drivers
- Primitive: page-uaf provides stable physical page-level read/write bypassing KASLR, CFI, slab hardening without control-flow hijacking
- Coverage: Samsung Galaxy S23–S26 + Z series; Xiaomi mid-range to flagship; Oppo-family flagships
- Demo devices (July 2026 firmware, locked bootloaders): Galaxy S26 Ultra, Galaxy S26, Xiaomi 17, Oppo Find X9 Ultra, OnePlus Ace 6 Ultra
- Series: Part 1 (strategy) published; Parts 2–4 (OEM-specific bugs) promised
Patches may not yet be deployed. Frame as active research disclosure; users should watch for OEM security updates.