Permission Control Flaw in Transsion Tranfacmode App
CVE-2025-14817
10CRITICAL
What is CVE-2025-14817?
The Transsion Tranfacmode application suffers from a significant access control vulnerability within its MainActivity component. This flaw allows malicious third-party applications to bypass user permissions and directly invoke ADB debugging features, potentially exposing sensitive device functionalities without requiring user consent. Such vulnerabilities can lead to unauthorized access and compromise user privacy, necessitating immediate attention and remediation.
Affected Version(s)
Tecno Pova6 Pro 5G HiOS V14.0.0
