TECNO
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| com.transsion.carlcare | 5 | – | Apr 16, 2025 |
| com.afmobi.boomplayer | 2 | – | Jun 16, 2025 |
| com.transsion.aivoiceassistant | 2 | – | May 15, 2025 |
| 4G Portable WiFi TR118 | 2 | – | Oct 20, 2024 |
| com.transsion.applock | 1 | – | Dec 13, 2024 |
| com.transsion.audiosmartconnect | 1 | – | Dec 10, 2025 |
| com.android.server.telecom | 1 | – | Jul 16, 2024 |
| com.transsion.kolun.aiservice | 1 | – | Apr 15, 2024 |
| com.transsion.phoenix | 1 | – | Nov 14, 2024 |
| com.transsion.videocallenhancer | 1 | – | May 21, 2024 |
| com.transsnet.store | 1 | – | Mar 11, 2025 |
| tech.palm.id | 1 | – | Jul 16, 2025 |
| Tecno Pova6 Pro 5G | 1 | – | Dec 17, 2025 |
Exploited and recent CVEs
- CVE-2025-14817 Factory Mode App Exists Privilege Escalation Issue Allowing Third-Party Apps to Open ADB 0.2%
- CVE-2025-9056 Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation. 0.2%
- CVE-2025-7703 Authentication vulnerability in the mobile application(tech.palm.id)may lead to the risk of information leakage. 0.3%
- CVE-2025-6172 Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operation. 0.5%
- CVE-2025-4737 Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage. <0.1%
- CVE-2025-3698 Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage risk. 0.4%
- CVE-2025-2190 The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks. 0.3%
- CVE-2025-1298 Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of account takeover. 0.5%
- CVE-2025-0590 Improper permission settings for mobile applications (com.transsion.carlcare) may lead to information leakage risk. 0.4%
- CVE-2024-12603 A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password. 0.6%
- CVE-2024-11206 Unauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to the leakage of user information. 0.4%
- CVE-2024-10195 Tecno 4G Portable WiFi TR118 SMS Check goform_get_cmd_process sql injection 0.4%
- CVE-2024-10018 Improper permission control in the mobile application (com.transsion.aivoiceassistant) can lead to the launch of any unexported component. 0.5%
- CVE-2024-8039 Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks. 0.4%
- CVE-2024-7697 Logical vulnerability in com.transsion.carlcare 0.6%
- CVE-2024-6780 Improper permission control in com.android.server.telecom 0.2%
- CVE-2024-5163 Improper permission settings in com.transsion.carlcare 0.5%
- CVE-2024-4988 Improper permission control in com.transsion.videocallenhancer 0.4%
- CVE-2024-3701 Improper Authentication in com.transsion.kolun.aiservice 0.6%
- CVE-2023-6304 Tecno 4G Portable WiFi TR118 Ping Tool goform_get_cmd_process os command injection 9.5%