CVE-2025-67316: Heytap Internet Browser

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in HeyTap/ColorOS browser. NOTE: The supplier is currently disputing this finding and the record is under review.

Affected products

• Heytap Internet Browser: version 45.13.4.1 only

Published 2026-01-05. Last modified 2026-07-05.