PT-2025-49188 · Oppo · Coloros

Published 2025-12-05 · Updated 2025-12-05 · CVE-2025-27389

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions ColorOS (affected versions not specified)

Description A flaw exists in the verification of application installation sources within ColorOS. This issue may cause the risk detection mechanism to fail under specific conditions, potentially allowing malicious applications to be installed without proper warning.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2025-27389

Affected Products

Coloros

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-27389 · Security Note
• https://t.me/CVEtracker/38888 · Telegram Post
• https://twitter.com/CVEnew/status/1996841721657999369 · Twitter Post
• https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1996493715665068032 · Note