CVE-2025-10184 is permission bypass that affects multiple OnePlus devices running OxygenOS 12–15 (NOT FIXED) with PoCThis vulnerability allows any application installed on the device to read SMS/MMS without permission, user interaction, or consent.

1. 22:33 · 2025年9月25日 · 周四

   

   ×

   

   CVE-2025-10184 is permission bypass that affects multiple OnePlus devices running OxygenOS 12–15 (NOT FIXED) with PoC
   This vulnerability allows any application installed on the device to read SMS/MMS without permission, user interaction, or consent.
   https://www.rapid7.com/blog/post/cve-2025-10184-oneplus-oxygenos-telephony-provider-permission-bypass-not-fixed/