Medium severity6.5NVD Advisory· Published Dec 17, 2025· Updated Jun 17, 2026

CVE-2025-14817

Description

The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging functionality without user interaction.

Affected products

Tecno/tranfacmodellm-create
TECNO/Tecno Pova6 Pro 5Gv5
Range: HiOS V14.0.0
Transsion/Hios
cpe:2.3:o:transsion:hios:14.0.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

security.tecno.com/SRC/blogdetail/434nvdVendor Advisory
security.tecno.com/SRC/securityUpdatesnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000