Information Leakage Vulnerability in Transsion's Mobile Application
CVE-2025-3698

7.5HIGH

Key Information:

Vendor

Tecno

Status
Com.transsion.carlcare
Vendor
CVE Published:
16 April 2025

What is CVE-2025-3698?

The Carlcare mobile application developed by Transsion has been found to contain an interface exposure vulnerability that could lead to potential information leakage. This vulnerability may allow unauthorized access to sensitive user data and information through inadequate protection of application interfaces. Users are advised to ensure they are using the latest version of the app to mitigate risks associated with this vulnerability.

Affected Version(s)

com.transsion.carlcare 6.2.7

References

https://security.tecno.com/SRC/blogdetail/410?lang=en_US
https://security.tecno.com/SRC/securityUpdates

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.