Unexported Component Launch Vulnerability

CVE-2024-10018

What is CVE-2024-10018?

A vulnerability exists within Tecno's mobile application that stems from improper permission controls. This flaw allows potential attackers to launch any unexported component of the application, which could lead to unauthorized functions being executed without proper restriction. Such vulnerabilities can expose sensitive user data or allow malicious actions that should not be possible under normal application operations.

References