Rapid7 reports a major OxygenOS flaw letting apps steal SMS data without permission, putting OnePlus users at risk.
Apple says the flaw involved 'a maliciously crafted font' that could cause an app to shut down or corrupt the process memory.