IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2025-12-17 07:15

MODIFIED

2025-12-17 07:15

EPSS (Prob. Exploit)

0.20%

Top 91.1%

DATA SOURCES:

NVD 🔗 2025-12-17 CVE PROJECT 🔗 2026-01-19 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging functionality without user interaction.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-269

> CWE DETAILED DESCRIPTIONS

CWE-269: Improper Privilege Management - The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

> HISTORIQUE DES MODIFICATIONS

Première apparition

17/12/2025 07:15

Source: NVD

📊 ENRICHISSEMENT 19/01/2026 17:38

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui

📊 ENRICHISSEMENT 01/01/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

CWE-269: Improper Privilege Management - The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Total des modifications: 2 Dernière mise à jour: 9 months ago

> REFERENCES

https://security.tecno.com/SRC/blogdetail/434?lang=en_US

https://security.tecno.com/SRC/securityUpdates