TECNO Mobile vulnerabilities
Published CVEs affecting TECNO Mobile products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-10510
Medium · 6.1
CWE-79 Jun 2, 2026
GeniexWebView XSS in com.transsion.aiassistantlifestyle
Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted web_action_data URL parameter.
CVE-2026-0634
High · 7.8
CWE-88 Apr 2, 2026
Code Execution in AssistFeedbackService on TECNO Pova7 Pro 5G
Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection.
CVE-2025-15385
Critical · 9.8
CWE-345 Jan 5, 2026
Insufficient Verification of Data Authenticity in Tecno Boomplay
Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63.