Vulnerabilities

Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63.

The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging…

Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation.

Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage.

Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operation.

Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage.

Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage risk.

The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks.

Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of account takeover.

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to information leakage risk.

A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password.

Unauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to the leakage of user information.

A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830.

Improper permission control in the mobile application (com.transsion.aivoiceassistant) can lead to the launch of any unexported component.

Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks.

Logical vulnerability in the mobile application (com.transsion.carlcare) may lead to user information leakage risks.

Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks.

The mobile application (com.transsion.videocallenhancer) interface has improper permission control, which can lead to the risk of private file leakage.

The system application (com.transsion.kolun.aiservice) component does not perform an authentication check, which allows attackers to perform malicious exploitations and affect system services.

A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830.

The Tecno Spark Pro Android device with a build fingerprint of TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer a…