---
id: CVE-2025-27389
title: >-
  A flaw exists in the verification of application installation sources within
  ColorOS
summary: >-
  A flaw exists in the verification of application installation sources within
  ColorOS. Under specific conditions, this issue may cause the risk detection
  mechanism to fail, which could allow malicious applications to be installed
  without …
severity: none
cwe:
  - CWE-290
published: '2025-12-05'
updated: '2026-09-25'
sourceUpdated: '2026-09-25T23:10:00.463'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-27389'
references:
  - url: >-
      https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1996493715665068032
    label: security@oppo.com
tags:
  - nvd
epss: 0.00131
epssPercentile: 0.02228
ingestedAt: '2026-09-25T23:21:16.884Z'
---

## Overview

A flaw exists in the verification of application installation sources within ColorOS. Under specific conditions, this issue may cause the risk detection mechanism to fail, which could allow malicious applications to be installed without proper warning.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.