Devices running OxygenOS 12 through 15 have a serious bug (CVE-2025-10184) that lets shady apps read and send your texts without permission. Attackers could grab your 2FA codes or send messages as you ...