<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>TECNO Mobile Limited — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/tecnomobile" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by TECNO Mobile Limited (tecnomobile).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/tecnomobile.png</url>
      <title>TECNO Mobile Limited — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:06 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-18907 · 7.5 HIGH 🌩️ — PathTravelsal Vulnerability in com.talpa.hibrowser</title>
      <link>https://vulnogram.org/CVE-2026-18907</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18907</guid>
      <description>Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 05 Aug 2026 01:47:16 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-10510 · 6.1 MEDIUM 🌩️ — GeniexWebView XSS in com.transsion.aiassistantlifestyle</title>
      <link>https://vulnogram.org/CVE-2026-10510</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-10510</guid>
      <description>Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via craft…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 02 Jun 2026 01:56:42 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-0634 · 7.8 HIGH — Code Execution in AssistFeedbackService on TECNO Pova7 Pro 5G</title>
      <link>https://vulnogram.org/CVE-2026-0634</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-0634</guid>
      <description>Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection.</description>
      <category>High</category>
      <pubDate>Thu, 02 Apr 2026 08:48:45 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-15385 · 9.8 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-15385</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-15385</guid>
      <description>Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 06 Jan 2026 01:39:20 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-14817 · 6.5 MEDIUM 🌩️ — Factory Mode App Exists Privilege Escalation Issue Allowing Third-Party Apps to Open ADB</title>
      <link>https://vulnogram.org/CVE-2025-14817</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-14817</guid>
      <description>The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging functionality without user in…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 17 Dec 2025 06:20:59 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-9056 · 5.3 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-9056</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-9056</guid>
      <description>Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 10 Dec 2025 03:30:42 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-7703 · 3.1 LOW</title>
      <link>https://vulnogram.org/CVE-2025-7703</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-7703</guid>
      <description>Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage.</description>
      <category>Low</category>
      <pubDate>Wed, 16 Jul 2025 09:13:39 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-6172 · 9.8 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-6172</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-6172</guid>
      <description>Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operation.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 16 Jun 2025 08:41:53 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-4737 · 6.2 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-4737</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-4737</guid>
      <description>Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage.</description>
      <category>Medium</category>
      <pubDate>Thu, 15 May 2025 07:58:15 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-3698 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-3698</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-3698</guid>
      <description>Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage risk.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 16 Apr 2025 02:24:23 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-2190 · 8.1 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-2190</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-2190</guid>
      <description>The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 11 Mar 2025 07:09:09 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-1298 · 9.8 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-1298</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-1298</guid>
      <description>Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of account takeover.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 14 Feb 2025 07:40:02 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-0590 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-0590</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-0590</guid>
      <description>Improper permission settings for mobile applications (com.transsion.carlcare) may lead to information leakage risk.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 20 Jan 2025 06:22:44 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-12603 · 9.8 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2024-12603</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-12603</guid>
      <description>A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 13 Dec 2024 02:54:44 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-11206 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2024-11206</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-11206</guid>
      <description>Unauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to the leakage of user information.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 14 Nov 2024 06:27:42 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-10018 · 9.8 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2024-10018</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-10018</guid>
      <description>Improper permission control in the mobile application (com.transsion.aivoiceassistant) can lead to the launch of any unexported component.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 16 Oct 2024 02:33:13 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-8039 · 9.8 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2024-8039</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-8039</guid>
      <description>Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Sat, 14 Sep 2024 03:28:20 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-7697 · 7.5 HIGH 🌩️ — Logical vulnerability in com.transsion.carlcare</title>
      <link>https://vulnogram.org/CVE-2024-7697</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-7697</guid>
      <description>Logical vulnerability in the mobile application (com.transsion.carlcare) may lead to user information leakage risks.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 12 Aug 2024 08:12:27 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-6780 · 3.3 LOW — Improper permission control in com.android.server.telecom</title>
      <link>https://vulnogram.org/CVE-2024-6780</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-6780</guid>
      <description>Improper permission control in the mobile application (com.android.server.telecom) may lead to user information security risks.</description>
      <category>Low</category>
      <pubDate>Tue, 16 Jul 2024 01:51:03 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-5163 · 9.8 CRITICAL 🌩️ — Improper permission settings in com.transsion.carlcare</title>
      <link>https://vulnogram.org/CVE-2024-5163</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-5163</guid>
      <description>Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 17 Jun 2024 03:07:04 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-4988 · 7.5 HIGH 🌩️ — Improper permission control in com.transsion.videocallenhancer</title>
      <link>https://vulnogram.org/CVE-2024-4988</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-4988</guid>
      <description>The mobile application (com.transsion.videocallenhancer) interface has improper permission control, which can lead to the risk of private file leakage.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 21 May 2024 10:04:10 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-3701 · 9.8 CRITICAL 🌩️ — Improper Authentication in com.transsion.kolun.aiservice</title>
      <link>https://vulnogram.org/CVE-2024-3701</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-3701</guid>
      <description>The system application (com.transsion.kolun.aiservice) component does not perform an authentication check, which allows attackers to perform malicious exploitations and affect system services.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 15 Apr 2024 07:56:07 GMT</pubDate>
    </item>
  </channel>
</rss>
