Permission Control Flaw in Transsion Tranfacmode App
CVE-2025-14817

10CRITICAL

Key Information:

Vendor

Tecno

Status
Tecno Pova6 Pro 5g
Vendor
CVE Published:
17 December 2025

What is CVE-2025-14817?

The Transsion Tranfacmode application suffers from a significant access control vulnerability within its MainActivity component. This flaw allows malicious third-party applications to bypass user permissions and directly invoke ADB debugging features, potentially exposing sensitive device functionalities without requiring user consent. Such vulnerabilities can lead to unauthorized access and compromise user privacy, necessitating immediate attention and remediation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Tecno Pova6 Pro 5G HiOS V14.0.0

References

https://security.tecno.com/SRC/securityUpdates
https://security.tecno.com/SRC/blogdetail/434?lang=en_US

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.