OnePlus has confirmed that phones running Oxygen OS 12, 14, and 15 are affected by a major SMS vulnerability that has no fix right now.