TECNOMobile

Latest CVEs · RSS

• CVE-2026-18907 2026-08-05
  Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename
• CVE-2026-10510 2026-06-02
  Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Andro
• CVE-2026-0634 2026-04-02
  Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection.
• CVE-2025-15385 2026-01-06
  Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Bo
• CVE-2025-14817 2025-12-17
  The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party app
• CVE-2025-9056 2025-12-10
  Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation.
• CVE-2025-7703 2025-07-16
  Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage.
• CVE-2025-6172 2025-06-16
  Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operation.
• CVE-2025-4737 2025-05-15
  Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage.
• CVE-2025-3698 2025-04-16
  Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage risk.
• CVE-2025-2190 2025-03-11
  The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks.
• CVE-2025-1298 2025-02-14
  Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of account takeover.
• CVE-2025-0590 2025-01-20
  Improper permission settings for mobile applications (com.transsion.carlcare) may lead to information leakage risk.
• CVE-2024-12603 2024-12-13
  A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password.
• CVE-2024-11206 2024-11-14
  Unauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to the leakage of user information.
• CVE-2024-10018 2024-10-16
  Improper permission control in the mobile application (com.transsion.aivoiceassistant) can lead to the launch of any unexported component.
• CVE-2024-8039 2024-09-14
  Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks.
• CVE-2024-7697 2024-08-12
  Logical vulnerability in the mobile application (com.transsion.carlcare) may lead to user information leakage risks.
• CVE-2024-6780 2024-07-16
  Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.
• CVE-2024-5163 2024-06-17
  Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks.
• CVE-2024-4988 2024-05-21
  The mobile application (com.transsion.videocallenhancer) interface has improper permission control, which can lead to the risk of private file leakage.
• CVE-2024-3701 2024-04-15
  The system application (com.transsion.kolun.aiservice) component does not perform an authentication check, which allows attackers to perform malicious exploitat