{"id":15616,"date":"2025-09-26T09:27:56","date_gmt":"2025-09-26T09:27:56","guid":{"rendered":"https:\/\/tezgyan.com\/index.php\/2025\/09\/26\/oneplus-phones-at-risk-major-security-flaw-allows-apps-to-read-sms-messages-and-steal-data-tech-news\/"},"modified":"2025-09-26T09:27:56","modified_gmt":"2025-09-26T09:27:56","slug":"oneplus-phones-at-risk-major-security-flaw-allows-apps-to-read-sms-messages-and-steal-data-tech-news","status":"publish","type":"post","link":"https:\/\/tezgyan.com\/index.php\/2025\/09\/26\/oneplus-phones-at-risk-major-security-flaw-allows-apps-to-read-sms-messages-and-steal-data-tech-news\/","title":{"rendered":"OnePlus Phones At Risk: Major Security Flaw Allows Apps To Read SMS Messages And Steal Data | Tech News"},"content":{"rendered":"<p><br \/>\n<\/p>\n<div id=\"story-9598006\">\n<p><span class=\"jsx-395e0e0beb19cb6e jsx-4143937483\">Last Updated:<\/span><time class=\"jsx-395e0e0beb19cb6e jsx-4143937483\">September 26, 2025, 14:20 IST<\/time><\/p>\n<h2 id=\"asubttl-9598006\" class=\"jsx-c9f81425ec968c48 jsx-517474997 asubttl-schema\">OnePlus phones with OxygenOS are at a big security risk because a flaw that could make your SMS messages easily readable.<\/h2>\n<div class=\"jsx-cc1b15cf85effb8b artsharwrp\"><a href=\"https:\/\/news18.co\/gnps-en-btn\" target=\"_blank\" class=\"jsx-91f4da8d48c13a79 gglebtn bggrn\"\/><\/p>\n<div id=\"artshare\" class=\"jsx-cc1b15cf85effb8b artshare\">\n<div class=\"jsx-cc1b15cf85effb8b stickdiv\">\n<div class=\"jsx-cc1b15cf85effb8b deskwrapstkdiv\">\n<div class=\"jsx-cc1b15cf85effb8b fontchange\"><img decoding=\"async\" src=\"https:\/\/images.news18.com\/dlxczavtqcctuei\/news18\/static\/images\/english\/font.svg\" height=\"30px\" width=\"30px\" alt=\"font\" title=\"font\" class=\"jsx-cc1b15cf85effb8b lazyload\"\/><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<figure class=\"jsx-c9f81425ec968c48 jsx-517474997 amimg\"><img decoding=\"async\" alt=\"OnePlus phones running on OxygenOS have got a major security issue\" title=\"OnePlus phones running on OxygenOS have got a major security issue\" src=\"https:\/\/images.news18.com\/ibnlive\/uploads\/2021\/07\/1627283897_news18_logo-1200x800.jpg?impolicy=website&amp;width=400&amp;height=225\" loading=\"eager\" fetchpriority=\"high\" class=\"jsx-c9f81425ec968c48 jsx-517474997\"\/><\/p>\n<p>OnePlus phones running on OxygenOS have got a major security issue<\/p>\n<\/figure>\n<p id=\"0\" class=\"story_para_0\"><span style=\"font-weight:400\">OnePlus users have got an alarming update this week which affects them in a dangerous way. Security analysts have discovered a security flaw which allows apps to directly access the SMS messages on a phone that is running on the OxygenOS version. The bigger worry is that the security issues are yet to be fixed, which OnePlus should hopefully do in the next few weeks.\u00a0<\/span><\/p>\n<p id=\"1\" class=\"story_para_1\"><span style=\"font-weight:400\">The experts have found issues with the older as well as the recent versions of OxygenOS running on OnePlus phones in countries like India and even the US.\u00a0<\/span><\/p>\n<p id=\"2\" class=\"story_para_2\"><span style=\"font-weight:400\"><strong>OnePlus SMS Security Flaw: What You Should Know<\/strong>\u00a0<\/span><\/p>\n<p id=\"3\" class=\"story_para_3\"><span style=\"font-weight:400\">The security findings by <em>Rapid7<\/em> suggest the OxygenOS flaw allows any app to easily read through the content of SMS stored on your OnePlus phone. And as we all know, SMS is used for OTPs to make payments, or buy groceries through apps and other confidential tasks.\u00a0<\/span><\/p>\n<p id=\"4\" class=\"story_para_4\"><span style=\"font-weight:400\">So, if any app is able to write the contents of an SMS without the user\u2019s permission on the device, the level of destruction it can cause is unimaginable. You can easily lose access to your accounts, or even the money in the bank if the bad actors tap into the right nerve points. And because the flaw operates covertly, the user won\u2019t even come to know if any app has accessed the SMS content, including any or all two-factor authentication codes needed for digital account logins.\u00a0<\/span><\/p>\n<p id=\"5\" class=\"story_para_5\"><span style=\"font-weight:400\">The cybersecurity firm claims all OnePlus phones running OxygenOS 12 or later versions, including 15 based on Android 15 are susceptible to these covert attacks. The OnePlus phones mentioned by the agency are:<\/span><\/p>\n<ul class=\"listOncontentArticleUL\">\n<li><span style=\"font-weight:400\">OnePlus 8T<\/span><\/li>\n<li>OnePlus 10 Pro 5G with Android 14<\/li>\n<li>OnePlus 10 Pro 5G with Android 15<\/li>\n<\/ul>\n<p id=\"7\" class=\"story_para_7\"><span style=\"font-weight:400\">But the list of devices could be much longer considering even the OxygenOS 15 version is part of the casualty list. This means devices like the OnePlus 12, OnePlus 13 and even the OnePlus Open foldable could be at a high risk.\u00a0<\/span><\/p>\n<p id=\"8\" class=\"story_para_8\"><span style=\"font-weight:400\"><strong>OnePlus SMS Security Danger: What The Company Has Said<\/strong>\u00a0<\/span><\/p>\n<p id=\"9\" class=\"story_para_9\"><span style=\"font-weight:400\">Rapid7 had reached out to OnePlus about the issues and disclosed all the details to the brand. And after a slight delay, OnePlus has acknowledged the security flaw and promises a global update to fix it.\u00a0<\/span><\/p>\n<p id=\"10\" class=\"story_para_10\"><span style=\"font-weight:400\">\u201cWe acknowledge the recent disclosure of CVE-2025-10184 and have implemented a fix. This will be rolled out globally via software update starting from mid-October. OnePlus remains committed to protecting customer data and will continue to prioritize security improvements,&#8221; a OnePlus spokesperson was quoted saying by <em>PCMag<\/em> in its <a href=\"https:\/\/au.pcmag.com\/mobile-phones\/113287\/oneplus-to-address-this-software-flaw-after-initial-silence\" rel=\"nofollow\">report<\/a>.\u00a0\u00a0<\/span><\/p>\n<p id=\"11\" class=\"story_para_11\"><span style=\"font-weight:400\">Until the security issues with OxygenOS aren\u2019t fixed, OnePlus users are being asked not to install apps, or entertain emails from unknown contacts and switch to multi-authentication apps (instead of SMS) for logins. <\/span><\/p>\n<div class=\"jsx-95088aad1b3c53cd atawrap\">\n<div class=\"jsx-95088aad1b3c53cd atadetailwrp\">\n<div class=\"jsx-95088aad1b3c53cd ataname\"><span class=\"jsx-95088aad1b3c53cd atthumb\"><\/p>\n<figure class=\"jsx-95088aad1b3c53cd\"><img decoding=\"async\" alt=\"S Aadeetya\" title=\"S Aadeetya\" src=\"https:\/\/images.news18.com\/ibnlive\/uploads\/2023\/11\/aadeetya-3-2023-11-9de48efa65a9ed8ed13a8932cadb6d5a.jpg?impolicy=website&amp;width=60&amp;height=60\" class=\"jsx-95088aad1b3c53cd\"\/><\/figure>\n<p><\/span><\/p>\n<div class=\"jsx-95088aad1b3c53cd attitle\"><a href=\"https:\/\/www.news18.com\/byline\/s-aadeetya-21044.html\" class=\"jsx-95088aad1b3c53cd atamail\">S Aadeetya<\/a><\/p>\n<p>S Aadeetya, Special Correspondent at News18 Tech, accidentally got into journalism 10 years ago, and since then, has been part of established media houses covering the latest trends in technology and helping fr&#8230;<span class=\"jsx-95088aad1b3c53cd aurpdebtn\">Read More<\/span><\/p>\n<\/div>\n<\/div>\n<p>S Aadeetya, Special Correspondent at News18 Tech, accidentally got into journalism 10 years ago, and since then, has been part of established media houses covering the latest trends in technology and helping fr&#8230;<!-- --> <span class=\"jsx-95088aad1b3c53cd aurpdebtn\">Read More<\/span><\/p>\n<\/div>\n<\/div>\n<div class=\"jsx-c9f81425ec968c48 jsx-517474997 artcta\">\n<div style=\"font-family:Inter;font-size:17px;line-height:28px\"><span data-olk-copy-source=\"MessageBody\">Get latest technology updates, including phone launches, gadget reviews, AI advancements. Stay informed with breaking tech <a href=\"https:\/\/www.news18.com\/news\/\">news<\/a>, expert insights, and trends from\u00a0<a href=\"https:\/\/www.news18.com\/india\/\">India<\/a>\u00a0and around the\u00a0<a href=\"https:\/\/www.news18.com\/world\/\">world<\/a>.\u00a0 Also Download the\u00a0<a href=\"https:\/\/onelink.to\/eng-article-eop\">News18 App<\/a> to stay updated.<\/span><\/div>\n<\/div>\n<div class=\"jsx-c9f81425ec968c48 jsx-517474997 atbtlink Location\"><span>Location :<\/span><\/p>\n<p><span>Delhi, India, India<\/span><\/p>\n<\/div>\n<div class=\"jsx-c9f81425ec968c48 jsx-517474997 atbtlink fp\"><span>First Published:<\/span><\/p>\n<div class=\"rs\">\n<p>September 26, 2025, 14:20 IST<\/p>\n<\/div>\n<\/div>\n<div class=\"jsx-c9f81425ec968c48 jsx-517474997 brdcrmb\"><a href=\"https:\/\/www.news18.com\/\">News<\/a>  <a href=\"https:\/\/www.news18.com\/tech\/\">tech<\/a>  <span class=\"brdout\"> OnePlus Phones At Risk: Major Security Flaw Allows Apps To Read SMS Messages And Steal Data<\/span><\/div>\n<div id=\"coral-wrap\" class=\"jsx-ba4d8f086a12294f \">\n<div class=\"jsx-ba4d8f086a12294f coral-cont\">\n<div class=\"jsx-ba4d8f086a12294f coltoptxt\">Disclaimer: Comments reflect users\u2019 views, not News18\u2019s. Please keep discussions respectful and constructive. Abusive, defamatory, or illegal comments will be removed. News18 may disable any comment at its discretion. By posting, you agree to our <a href=\"https:\/\/www.news18.com\/disclaimer\/\" class=\"jsx-ba4d8f086a12294f\">Terms of Use<\/a> and <a href=\"https:\/\/www.news18.com\/privacy_policy\/\" class=\"jsx-ba4d8f086a12294f\">Privacy Policy<\/a>.<\/div>\n<\/div>\n<\/div>\n<p><span class=\"jsx-c9f81425ec968c48 jsx-517474997 rmbtn news18_read_more\">Read More<\/span><\/p>\n<\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/www.news18.com\/tech\/oneplus-phones-at-risk-major-security-flaw-allows-apps-to-read-sms-messages-and-steal-data-ws-l-9598006.html\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Last Updated:September 26, 2025, 14:20 IST OnePlus phones with OxygenOS are at a big security risk because a flaw that could make your SMS messages easily readable. OnePlus phones running on OxygenOS have got a major security issue OnePlus users have got an alarming update this week which affects them in a dangerous way. Security&#8230;<\/p>\n","protected":false},"author":1,"featured_media":2901,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[49],"tags":[],"class_list":["post-15616","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech"],"_links":{"self":[{"href":"https:\/\/tezgyan.com\/index.php\/wp-json\/wp\/v2\/posts\/15616","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tezgyan.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tezgyan.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tezgyan.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tezgyan.com\/index.php\/wp-json\/wp\/v2\/comments?post=15616"}],"version-history":[{"count":0,"href":"https:\/\/tezgyan.com\/index.php\/wp-json\/wp\/v2\/posts\/15616\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tezgyan.com\/index.php\/wp-json\/wp\/v2\/media\/2901"}],"wp:attachment":[{"href":"https:\/\/tezgyan.com\/index.php\/wp-json\/wp\/v2\/media?parent=15616"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tezgyan.com\/index.php\/wp-json\/wp\/v2\/categories?post=15616"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tezgyan.com\/index.php\/wp-json\/wp\/v2\/tags?post=15616"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}