All articles tagged with #cve 2025 10184
A security flaw in OnePlus's OxygenOS allows apps to access SMS data without permission, affecting multiple versions and remaining unpatched, prompting recommendations for users to limit app installations and use encrypted messaging. OnePlus has acknowledged the issue and plans a global fix starting mid-October.
Security researchers Rapid7 have identified a critical Android vulnerability in OnePlus devices running OxygenOS 12 that allows malicious apps to read SMS and MMS messages without user permission, potentially bypassing multi-factor authentication and exposing sensitive data. Despite multiple attempts, OnePlus has not responded to security disclosures, leading Rapid7 to publicly disclose the flaw, which affects numerous devices and versions.