Skip to content
OpenAdvisories

Archive

23 September 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.2
    CVE-2025-10184 Public exploit

    OnePlus OxygenOS Telephony provider permission bypass

    The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider without permission, user interaction, or consent. The user is also not notified that SMS data is being accessed. Thi…

  • High 7.5
    CVE-2025-55780 Public exploit

    A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malfo…