CVE-2025-27389 — Application Installation Source Verification Flaw May Lead to Risk Detection Bypass

CVE-2025-27389

Application Installation Source Verification Flaw May Lead to Risk Detection Bypass PUBLISHED

Description (CNA)

A flaw exists in the verification of application installation sources within ColorOS. Under specific conditions, this issue may cause the risk detection mechanism to fail, which could allow malicious applications to be installed without proper warning.

Affected (CNA)

Vendor / product	Versions
ColorOS / ColorOS	affected ColorOS 11–15

CWE

CWE-290

References

https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1996493715665068032

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.