As an example, the original OnePlus One has good LineageOS support, but the vendor security patches were seemingly discontinued three years ago:


What are the security implications and is the vendor dropping support enough of a reason to buy a new phone?


Though I don't know your security requirements and willingness to pay for security, the answer is probably yes. In the last 3 years multiple sandbox escape, remote code execution and privilege escalation vulnerabilities have been disclosed for Android. It is not unlikely that an attacker could fully take over your smartphone by:

  1. executing code in your browser, either through XSS of a genuine website that you visit or when you access a malicious website
  2. escape the browser sandbox to execute code on a system level
  3. escalate his/her privileges to root by exploiting a privilege escalation vulnerability

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.