CVE-2025-14817

Published: Dec 17, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 3.9 / Impact: 2.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging functionality without user interaction.

Affected (1)

Products: Transsion: Hios

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Transsion Hios	Version 14.0.0

Running on/with	Platform Versions
Transsion Tecno Pova6 Pro 5g	All versions

Related CWEs

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://security.tecno.com/SRC/blogdetail/434?lang=en_US

Source: 907edf6c-bf03-423e-ab1a-8da27e1aa1ea

Vendor Advisory

https://security.tecno.com/SRC/securityUpdates

Source: 907edf6c-bf03-423e-ab1a-8da27e1aa1ea

Vendor Advisory

Timeline

No history available yet.