Vendor
TECNO
20 known vulnerabilities.
TECNO at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 2 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 1 | 0 |
| Jun 2025 | 1 | 1 |
| May 2025 | 1 | 0 |
| Apr 2025 | 1 | 0 |
| Mar 2025 | 1 | 0 |
| Feb 2025 | 1 | 1 |
| Jan 2025 | 1 | 0 |
| Dec 2024 | 1 | 1 |
Products
20 results · Feed
-
Medium 6.5
Factory Mode App Exists Privilege Escalation Issue Allowing Third-Party Apps to Open ADB
The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging functionality without user interaction.
-
Medium 5.3
Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized servi…
-
Low 3.1
Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage.
-
Critical 9.8
Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operati…
-
Medium 6.2
Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk o…
-
High 7.5
Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage ris…
-
High 8.1
The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injec…
-
Critical 9.8
Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of account takeover.
-
High 7.5
Improper permission settings for mobile applications (com.transsion.carlcare) may lead to information leakage risk.
-
Critical 9.8CVE-2024-12603 Public exploit
A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application passw…
-
High 7.5
Unauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to the leakage of user inf…
-
Medium 4.7
Tecno 4G Portable WiFi TR118 SMS Check goform_get_cmd_process sql injection
A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /goform/goform_get_cmd_process of the component SMS Check. The manipulation of th…
-
Critical 9.8
Improper permission control in the mobile application (com.transsion.aivoiceassistant) can lead to the launch of any un…
-
Critical 9.8
Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) c…
-
High 7.5
Logical vulnerability in com.transsion.carlcare
Logical vulnerability in the mobile application (com.transsion.carlcare) may lead to user information leakage risks.
-
Low 3.3
Improper permission control in com.android.server.telecom
Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.
-
Critical 9.8
Improper permission settings in com.transsion.carlcare
Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks.
-
High 7.5
Improper permission control in com.transsion.videocallenhancer
The mobile application (com.transsion.videocallenhancer) interface has improper permission control, which can lead to the risk of private file leakage.
-
Critical 9.8
Improper Authentication in com.transsion.kolun.aiservice
The system application (com.transsion.kolun.aiservice) component does not perform an authentication check, which allows attackers to perform malicious exploitations and affect system services.
-
High 7.2
Tecno 4G Portable WiFi TR118 Ping Tool goform_get_cmd_process os command injection
A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been declared as critical. This vulnerability affects unknown code of the file /goform/goform_get_cmd_process of the component Ping Tool. The manip…