Local File Overwrite Vulnerability in AudioLink Component by Tecno
CVE-2025-9056

10CRITICAL

Key Information:

Vendor

Tecno

Status
Com.transsion.audiOSmartconnect
Vendor
CVE Published:
10 December 2025

What is CVE-2025-9056?

The AudioLink component from Tecno contains an unprotected service that can be exploited by a local attacker. This vulnerability allows the attacker to overwrite system files through unauthorized service invocation, potentially compromising device functionality and user data integrity. Prompt action is recommended to mitigate the risks associated with this exploit.

Affected Version(s)

com.transsion.audiosmartconnect 1.3.0.87

References

https://security.tecno.com/SRC/securityUpdates

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-9056 : Local File Overwrite Vulnerability in AudioLink Component by Tecno