CVE-2025-27388

Publication date

2025-08-14 07:15:10

Family

OPPO

State

PUBLISHED

Description

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.