CVE-2025-57452

MEDIUM 6.1CVE-2025-57452 · Published 18/09/2025 · updated 05/11/2026

In short

CVE-2025-57452 is a MEDIUM (CVSS 6.1) vulnerability affecting clone phone (realme).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 17.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
clone phone realme	`= 15.11.2_281008_250314`	No fix yet

Description

In realme BackupRestore app v15.1.12_2810c08_250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity allows local attackers to cause a crash and potential XSS via crafted ADB intents.

References

realme.com · Product
gist.github.com/Brucewebva/8a37010c5b1f05fd5e61591830bcbb37 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free