OPPO Find X9 Ultra (PMA110)

OPPO Find X9 Ultra (PMA110)
Security Grade B Calculator v1	OPPO Find X9 Ultra Brand: OPPO (Parent: Guangdong OPPO Mobile Telecommunications Corp., Ltd.) Category: PMA110 (China, 12GB RAM / 512GB storage) • Model / Gen: Find X9 Series (2026) PMA110 (China, 12GB RAM / 512GB storage) Release Date: 2026-04-24 • Status: In sale Classification Date: 2026-10-29 • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	Android Verified Boot provides cryptographic integrity verification for boot and system partitions, helping to detect unauthorized software modifications. ColorOS 16 also offers device-locking and anti-theft security features. However, these measures do not directly establish resistance to physical hardware modification or the frequency of malicious hardware tampering on OPPO Find X9 Ultra (PMA110). Rare is a provisional estimate rather than a verified incident frequency.
Known vulnerabilities	Rare	🔗 Proof	Public security research documents a local privilege-escalation technique associated with CVE-2026-43499 and reports successful testing on the OPPO Find X9 Ultra PMA110 running firmware versions 16.0.7.211 and 16.0.9.402. This provides model-specific evidence of at least one exploitable vulnerability in certain firmware builds. The applicability to newer firmware versions and the current patch status have not been independently verified. Rare is selected provisionally because the frequency of vulnerabilities across all versions is unknown.
Prior attacks	None	🔗 Proof	The reviewed public sources document authorized security research and a working proof of concept on certain PMA110 firmware versions. However, they do not establish that the device has been used in an IoT botnet or a confirmed malicious attack campaign. No such model-specific campaign was identified in the reviewed evidence. None is therefore a provisional rating and must not be interpreted as proof that no attacks have ever occurred.
Updatability	Very common	🔗 Proof	The OPPO Find X9 Ultra PMA110 supports over-the-air ColorOS software updates. Public firmware archives list multiple releases for the Chinese model, including 16.0.7.211, 16.0.8.306, 16.0.9.402, and 16.0.10.501. OPPO also operates an official security-update and vulnerability-remediation program. These records support a provisional Very common rating for software maintenance, although the exact security patch frequency of every build has not been independently established.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	The device uses Android 16 with ColorOS 16 and supports authenticated network connections through TLS certificate validation and application-level authentication mechanisms. However, authentication varies between third-party applications, cloud services, wireless accessories and other external systems. Full mutual authentication across every connection has not been established. Therefore Partial authentication is selected.
Communications	Encrypted with up-to-date encryption	🔗 Proof	Android supports modern network encryption using HTTPS and TLS. For applications targeting Android 9 or later, cleartext network traffic is disabled by default unless an exception is configured. The OPPO Find X9 Ultra runs Android 16 and therefore provides these platform security mechanisms. However, some third-party applications may explicitly permit unencrypted traffic, so not every connection is guaranteed to be encrypted.
Storage	Encrypted with up-to-date encryption	🔗 Proof	The OPPO Find X9 Ultra was launched with Android 16. Android requires devices launched with Android 10 or later to implement file-based encryption. File-based encryption protects stored user data with cryptographic keys and separates credential-encrypted data from device-encrypted data. ColorOS also provides privacy controls for sensitive files. This rating is based on documented platform requirements rather than an independent audit of the PMA110 storage implementation.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Basic	🔗 Proof	https://support.oppo.com/eg/answer/?aid=neu13797
Authentication	Secure	🔗 Proof	The OPPO Find X9 Ultra supports an ultrasonic in-display fingerprint sensor and facial recognition. ColorOS 16 also supports PINs, patterns and alphanumeric screen-lock passwords. These mechanisms offer several options for authenticating users and protecting access to personal data. The security strength of facial recognition and individual credential configurations may vary.
Brute-force protection	Exist	🔗 Proof	Android requires rate-limiting mechanisms to protect lock-screen PINs, patterns and passwords against repeated incorrect guesses. Trusted execution or secure hardware can enforce delays and temporary lockouts. OPPO's own support instructions also describe temporary restrictions after too many incorrect password attempts. The precise lockout thresholds for PMA110 have not been independently tested.
Event logging	Partial logging	🔗 Proof	Android provides Privacy Dashboard functionality to show selected application permission-access events, including access to sensitive data such as the camera and microphone. This is evidence of platform-level activity monitoring. However, the availability and presentation of these records may differ in the Chinese ColorOS configuration, and a complete audit log of all device unlocks and authentication attempts has not been verified. Partial logging is a provisional assessment.
Passwords	Require change after setup	🔗 Proof	ColorOS 16 supports user-created screen-lock credentials, including numeric passwords, patterns and alphanumeric passwords. Users can configure a password during initial setup and change it later. No shared factory-default screen-lock password is documented for PMA110. A mandatory change of a preinstalled password after setup has not been established. Require change after setup is therefore an approximate rubric choice rather than a literal description of the device's password policy.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	ColorOS 16.0 based on Android 16 (at launch) (Companion App: Not required (standalone smartphone); OPPO system apps and HeyTap services supported)
Hardware (CPU / GPU)	CPU: Qualcomm Snapdragon 8 Elite Gen 5 Mobile Platform, octa-core CPU (2 high-performance cores + 6 performance cores, up to 4.608 GHz) • GPU: Qualcomm Adreno 840 GPU, up to 1200 MHz
Memory & Storage	Memory: 12 GB LPDDR5X RAM • Storage: 512 GB UFS 4.1 internal storage; no microSD card expansion
Power, Battery & Charging	Battery: 7050 mAh (typical), 6890 mAh (rated), built-in rechargeable battery • Power: Built-in rechargeable battery; USB Type-C wired power input; wireless charging supported • Charging: 100W SUPERVOOC wired fast charging, 100W UFCS support, up to 50W AIRVOOC wireless charging; compatible with USB PD and PPS
Display & Camera	Display: 6.82-inch QHD+ AMOLED flat display, 3168 x 1440 pixels, 510 ppi, 10-bit colour, 1-120Hz adaptive refresh rate (up to 144Hz in selected games), 1800 nits high-brightness mode • Camera: Rear: 200MP main (f/1.5, OIS) + 50MP ultra-wide (f/2.0) + 200MP telephoto (f/2.2, OIS) + 50MP ultra-telephoto (f/3.5, OIS) + colour sensor; Front: 50MP autofocus camera (f/2.4)
Sound & Connectivity	Sound: Built-in speakers and microphones; USB-C digital audio, Bluetooth LE Audio, SBC, AAC, LDAC, aptX, aptX HD, aptX Adaptive and LHDC 5.0 • Connectivity: 5G NR, 4G LTE, Wi-Fi 7 (802.11be), Wi-Fi 6, Bluetooth 6.0, BLE, NFC, GPS, BeiDou, GLONASS, Galileo, QZSS, USB Type-C 3.2 Gen 1, dual Nano-SIM
Physical (Dimensions & Mass)	Dimensions: PMA110 (China, 12GB RAM / 512GB storage) • Mass: 235 g

The OPPO Find X9 Ultra (PMA110) is a flagship 5G smartphone developed by Guangdong OPPO Mobile Telecommunications Corp., Ltd. It was officially introduced in April 2026 and became available in China on April 24, 2026. This assessment focuses on the Chinese version with 12GB of LPDDR5X RAM, 512GB of UFS 4.1 storage, and the Polar Glacier finish.

The smartphone is powered by the Qualcomm Snapdragon 8 Elite Gen 5 mobile platform, featuring an octa-core CPU with a maximum clock speed of approximately 4.608GHz and an Adreno 840 GPU.

The device features a 6.82-inch QHD+ AMOLED display with a resolution of 3168 × 1440 pixels, a pixel density of 510 PPI, and a variable refresh rate of up to 120Hz, with support for 144Hz in selected gaming scenarios.

Its Hasselblad camera system includes a 200MP main camera with optical image stabilization, a 50MP ultra-wide camera, a 200MP telephoto camera, a 50MP ultra-telephoto camera, and an additional colour sensor. The front camera has a resolution of 50MP.

The OPPO Find X9 Ultra features a 7050mAh rechargeable battery supporting 100W SUPERVOOC wired charging and up to 50W AIRVOOC wireless charging. It also supports Wi-Fi 7, Bluetooth 6.0, NFC, 5G mobile networks, satellite positioning systems, and USB Type-C 3.2 Gen 1 connectivity. The evaluated PMA110 model does not include the satellite communication features exclusive to the PMA120 version.

The device was launched with ColorOS 16 based on Android 16. Its security capabilities include ultrasonic fingerprint authentication, facial recognition, screen-lock passwords, Android file-based encryption, privacy controls, and application-level access protection.

Android provides network security mechanisms such as HTTPS and TLS, while file-based encryption helps protect locally stored personal information. Android also implements authentication rate limiting to reduce the risk of automated password guessing.

OPPO operates an official security update and vulnerability remediation program. Public firmware records for the PMA110 model list multiple software releases during 2026, demonstrating that the device supports continued software maintenance. However, the exact security patch frequency and the patch status of every vulnerability require additional verification.

A significant security consideration is the publicly documented local privilege-escalation research associated with CVE-2026-43499. Security researchers have reported successful testing on certain OPPO Find X9 Ultra PMA110 firmware versions, including 16.0.7.211 and 16.0.9.402. These findings provide model-specific evidence of a security weakness in particular software builds. They do not establish that every firmware version is vulnerable or that the device has been used in a malicious botnet attack.

The device supports several security protections, but limitations remain. Publicly available information does not establish the frequency of malicious physical hardware tampering, the complete history of successful attacks, or the security configuration of every third-party application and external connection.

This classification is based on OPPO official product specifications, ColorOS documentation, Android security documentation, manufacturer security advisories, publicly available firmware records, and independent security research reviewed as of October 25, 2026.

Some ratings remain provisional because complete model-specific attack statistics, physical hardware tampering data, and independent security audit results are unavailable.

The resulting Wiki-IoT security grade is a preliminary evaluation based on publicly available evidence. It does not represent an official OPPO security certification or a guarantee that the device is free from vulnerabilities.