Read the docs
TI-2025-01927 Aliases CVE-2025-2197GHSA-4jxj-m8qc-7mcw

Type Confusion Vulnerability in Browser

Priority LOW 20CWE-843Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Browser is affected by type confusion vulnerability, successful exploitation of this vulnerability may affect service availability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00298 22nd percentileScored 2026-11-07
Fix Fixed com. hihonor.baidu.browser (Honor): 8.1.1.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Honorcom. hihonor.baidu.browser8.1.0.6 to before 8.1.1.38.1.1.3Patch availableCNA
  • com. hihonor.baidu.browser VendorHonor Affected 8.1.0.6 to before 8.1.1.3 Fixed in 8.1.1.3 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:honor:baidu:*:*:*:*:*:*:*:*before 8.1.1.3VulnerableHonor
  • cpe:2.3:a:honor:baidu:*:*:*:*:*:*:*:* Versions before 8.1.1.3 Vulnerable ·Honor

Remediation

  • Fix · CNA com. hihonor.baidu.browser (Honor) Fixed in 8.1.1.3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-2197
  2. 2026-10-03 Alias added: GHSA-4jxj-m8qc-7mcw

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences