Priority MEDIUM 48
Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00229 · Published 2026-01-06 · No fix listed CWE-345
Priority MEDIUM 47
A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.09521 · Published 2023-11-27 · No fix listed CWE-78
Priority MEDIUM 41
Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00906 · Published 2026-08-05 · No fix listed CWE-23
Priority LOW 37
Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0053 · Published 2026-04-02 · No fix listed CWE-88
Priority LOW 37
The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.01066 · Published 2019-11-14 · No fix listed
Priority LOW 34
The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versio…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00387 · Published 2019-11-14 · No fix listed CWE-78
Priority LOW 34
The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versio…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00332 · Published 2019-11-14 · No fix listed CWE-668
Priority LOW 34
The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00385 · Published 2019-11-14 · No fix listed CWE-668
Priority LOW 34
The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00387 · Published 2019-11-14 · No fix listed CWE-78
Priority LOW 34
The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontaine…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00387 · Published 2019-11-14 · No fix listed CWE-78
Priority LOW 34
The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontaine…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00332 · Published 2019-11-14 · No fix listed CWE-668
Priority LOW 34
The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00332 · Published 2019-11-14 · No fix listed CWE-668
Priority LOW 34
The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00387 · Published 2019-11-14 · No fix listed CWE-78
Priority LOW 34
The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defconta…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00387 · Published 2019-11-14 · No fix listed CWE-78
Priority LOW 34
The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defconta…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00332 · Published 2019-11-14 · No fix listed CWE-668
Priority LOW 26
Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Android allows remote attacker to execute arbitrary JavaScript in…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00155 · Published 2026-06-02 · No fix listed CWE-79
Priority LOW 25
The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00285 · Published 2019-11-14 · No fix listed
Priority LOW 23
A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00402 · Published 2024-10-20 · No fix listed CWE-89
Priority LOW 11
Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension.
CVSS 3.1LOW 2.1· Physical · Low privileges · No interaction · EPSS 0.00281 · Published 2023-12-31 · No fix listed CWE-862