TECNO

A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password.

The system application (com.transsion.kolun.aiservice) component does not perform an authentication check, which allows attackers to perform malicious exploitations and affect system services.

Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operation.

Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of account takeover.

Improper permission control in the mobile application (com.transsion.aivoiceassistant) can lead to the launch of any unexported component.

Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks.

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks.

Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63.

A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830.

Unauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to the leakage of user information.

Logical vulnerability in the mobile application (com.transsion.carlcare) may lead to user information leakage risks.

Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage risk.

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to information leakage risk.

The mobile application (com.transsion.videocallenhancer) interface has improper permission control, which can lead to the risk of private file leakage.

The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks.

The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging…

The Tecno Spark Pro Android device with a build fingerprint of TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer a…

Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage.

Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation.

A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830.

Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage.

Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.