A newly disclosed flaw in OnePlus OxygenOS lets any app on a device read SMS and MMS messages without asking the user. Tracked as CVE-2025-10184, the issue stems from a permission bypass in the Telephony content provider (com.android.providers.telephony). Normally, apps must hold the Android READ_SMS permission and prompt the user before accessing text messages. In […]

The post OnePlus OxygenOS Vulnerability Lets Apps Access SMS Data Without User Permission appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

Source: gbHackers
Source Link: https://gbhackers.com/oneplus-oxygenos-vulnerability/