CVE-2025-67316

An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser. NOTE: The supplier is currently disputing this finding and the record is under review...

CVE-2025-67316

An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser. NOTE: The supplier is currently disputing this finding and the record is under review...

CVE-2025-67316

An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser. NOTE: The supplier is currently disputing this finding and the record is under review...

EUVD-2026-0829

An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser...

Realme Internet Browser security vulnerability

realme Internet Browser is a mobile browser from the Chinese company realme realme. A security vulnerability exists in realme Internet Browser version 45.13.4.1, which stems from the built-in HeyTap/ColorOS browser improperly handling specially crafted web pages, which could lead to the execution...

CVE-2025-67316

An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser. NOTE: The supplier is currently disputing this finding and the record is under review...

PT-2026-1298

Name of the Vulnerable Software and Affected Versions realme Internet browser version 45.13.4.1 Description An issue in realme Internet browser version 45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser. Recommendations Update...

CVE-2025-67316: Improper Neutralization of Input During Web Page Generation

An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser. NOTE: The supplier is currently disputing this finding and the record is under review...

CVE-2025-67316

An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser. NOTE: The supplier is currently disputing this finding and the record is under review...

CVE-2025-67316

The realme Internet browser version 45.13.4.1 is vulnerable to an issue in the built-in HeyTap/ColorOS browser . A remote attacker can exploit this by providing a crafted webpage , which may lead to arbitrary code execution . To remediate this, users should update the realme Internet browser to a...

Malicious code in fin-heytap-official (npm)

The package fin-heytap-official was found to contain malicious code...

MAL-2025-20561 Malicious code in fin-heytap-official (npm)

The package fin-heytap-official was found to contain malicious code...

Malware in heytap

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in heytap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd65315913bd79c6221ae968a448d85b4188a3d48da3178a5d88c034eddc5c80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1365 Malicious code in heytap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd65315913bd79c6221ae968a448d85b4188a3d48da3178a5d88c034eddc5c80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...