Insufficient Encryption Vulnerability in Tecno Mobile Application
CVE-2025-4737

6.2MEDIUM

Key Information:

Vendor

Tecno

Status
Com.transsion.aivoiceassistant
Vendor
CVE Published:
15 May 2025

What is CVE-2025-4737?

The Tecno mobile application 'Aivoice Assistant' has been identified with an insufficient encryption vulnerability that may expose sensitive user information. This flaw can potentially allow unauthorized access to confidential data, raising concerns about user privacy and security. Users should be aware of this risk and ensure they are following best practices for security in mobile applications.

Affected Version(s)

com.transsion.aivoiceassistant 4.1.1.014

References

https://security.tecno.com/SRC/blogdetail/422?lang=en_US
https://security.tecno.com/SRC/securityUpdates

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-4737 : Insufficient Encryption Vulnerability in Tecno Mobile Application