TECNO

Products

ProductCVEsExploitedLatest
com.transsion.carlcare5–Apr 16, 2025
com.afmobi.boomplayer2–Jun 16, 2025
com.transsion.aivoiceassistant2–May 15, 2025
4G Portable WiFi TR1182–Oct 20, 2024
com.transsion.applock1–Dec 13, 2024
com.transsion.audiosmartconnect1–Dec 10, 2025
com.android.server.telecom1–Jul 16, 2024
com.transsion.kolun.aiservice1–Apr 15, 2024
com.transsion.phoenix1–Nov 14, 2024
com.transsion.videocallenhancer1–May 21, 2024
com.transsnet.store1–Mar 11, 2025
tech.palm.id1–Jul 16, 2025
Tecno Pova6 Pro 5G1–Dec 17, 2025

Exploited and recent CVEs

  • CVE-2025-14817 Medium 6.5 Factory Mode App Exists Privilege Escalation Issue Allowing Third-Party Apps to Open ADB 0.2%
  • CVE-2025-9056 Medium 5.3 Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation. 0.2%
  • CVE-2025-7703 Low 3.1 Authentication vulnerability in the mobile application(tech.palm.id)may lead to the risk of information leakage. 0.3%
  • CVE-2025-6172 Critical 9.8 Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operation. 0.5%
  • CVE-2025-4737 Medium 6.2 Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage. <0.1%
  • CVE-2025-3698 High 7.5 Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage risk. 0.4%
  • CVE-2025-2190 High 8.1 The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks. 0.3%
  • CVE-2025-1298 Critical 9.8 Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of account takeover. 0.5%
  • CVE-2025-0590 High 7.5 Improper permission settings for mobile applications (com.transsion.carlcare) may lead to information leakage risk. 0.4%
  • CVE-2024-12603 Critical 9.8 A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password. 0.6%
  • CVE-2024-11206 High 7.5 Unauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to the leakage of user information. 0.4%
  • CVE-2024-10195 Medium 4.7 Tecno 4G Portable WiFi TR118 SMS Check goform_get_cmd_process sql injection 0.4%
  • CVE-2024-10018 Critical 9.8 Improper permission control in the mobile application (com.transsion.aivoiceassistant) can lead to the launch of any unexported component. 0.5%
  • CVE-2024-8039 Critical 9.8 Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks. 0.4%
  • CVE-2024-7697 High 7.5 Logical vulnerability in com.transsion.carlcare 0.6%
  • CVE-2024-6780 Low 3.3 Improper permission control in com.android.server.telecom 0.2%
  • CVE-2024-5163 Critical 9.8 Improper permission settings in com.transsion.carlcare 0.5%
  • CVE-2024-4988 High 7.5 Improper permission control in com.transsion.videocallenhancer 0.4%
  • CVE-2024-3701 Critical 9.8 Improper Authentication in com.transsion.kolun.aiservice 0.6%
  • CVE-2023-6304 High 7.2 Tecno 4G Portable WiFi TR118 Ping Tool goform_get_cmd_process os command injection 9.5%