TECNO Mobile Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with TECNO Mobile products.
Products
- com.afmobi.boomplayer1 vulnerability
- com.transsion.aiassistantlifestyle1 vulnerability
- Hi Browser1 vulnerability
- TECNO Pova7 Pro 5G1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-18907HIGH | PathTravelsal Vulnerability in com.talpa.hibrowserPath Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename. CWE-23Aug 5, 2026 | CVSS7.5v3.1 | EPSS0.586% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-10510MEDIUM | GeniexWebView XSS in com.transsion.aiassistantlifestyleCross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted web_action_data URL parameter. CWE-79Jun 2, 2026 | CVSS6.1v3.1 | EPSS0.155% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-0634HIGH | Code Execution in AssistFeedbackService on TECNO Pova7 Pro 5GCode execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection. CWE-88Apr 2, 2026 | CVSS7.8v3.1 | EPSS0.521% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-15385CRITICAL | Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63. CWE-345Jan 6, 2026 | CVSS9.8v3.1 | EPSS0.208% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |