Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience.
References
| Link | Resource |
|---|---|
| https://relieved-knuckle-264.notion.site/Reolink-Task-Hijacking-21a437003642808ba21fd79530a21e96 | Exploit Third Party Advisory |
Configurations
History
01 Sep 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience. |
28 Aug 2025, 13:28
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Reolink reolink
Reolink |
|
| Summary |
|
|
| References | () https://relieved-knuckle-264.notion.site/Reolink-Task-Hijacking-21a437003642808ba21fd79530a21e96 - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:reolink:reolink:4.54.0.4.20250526:*:*:*:*:android:*:* |
22 Aug 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-491 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
22 Aug 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-22 17:15
Updated : 2025-09-01 22:15
NVD link : CVE-2025-55622
Mitre link : CVE-2025-55622
CVE.ORG link : CVE-2025-55622
JSON object : View
Products Affected
reolink
- reolink
CWE
CWE-491
Public cloneable() Method Without Final ('Object Hijack')