Rapid7 reports a major OxygenOS flaw letting apps steal SMS data without permission, putting OnePlus users at risk.
Devices running OxygenOS 12 through 15 have a serious bug (CVE-2025-10184) that lets shady apps read and send your texts without permission. Attackers could grab your 2FA codes or send messages as you ...