Topic: oxygenos vulnerability

Unpatched OnePlus Flaw Lets Malicious Apps Send Texts

A security flaw in OnePlus's OxygenOS allows malicious apps to silently read SMS messages and metadata without user permission, posing a significant privacy risk. The vulnerability, CVE-2025-10184, stems from flawed security configurations in modified Android components, enabling blind SQL inject...