Tecno vulnerabilities
Published CVEs affecting Tecno products: 3 record(s), with severity, exploitation and fixes.
CVE-2025-15385
Critical · 9.8
CWE-345 Jan 5, 2026
Insufficient Verification of Data Authenticity in Tecno Boomplay
Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63.
CVE-2025-14817
Medium · 6.5
CWE-862 Dec 17, 2025
Factory Mode App Exists Privilege Escalation Issue Allowing Third-Party Apps to Open ADB
The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging functionality without user interaction.
CVE-2025-9056
Medium · 5.3
CWE-863 Dec 10, 2025
Unprotected service in the AudioLink component allows a local attacker to overwrite system files...
Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation.