Heytap vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Heytap products: 1 record(s), with severity, exploitation and fixes.

Internet Browser 1

Exploited only (KEV) →

CVE-2025-67316 Medium · 5.4 CWE-79 Jan 5, 2026

Cross-site Scripting (XSS) in Heytap Internet Browser

An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser. NOTE: The supplier is currently disputing this finding and the record is under review.