Researchers found a flaw with OnePlus software dating back to 2015 that could allow any app to access text messages.