VULNERABILITY INTELLIGENCE

CVE-2025-14817

CVSS score10 CRITICAL
EPSS probability0.20%
CISA KEVNot currently listed
Published2025-12-17
Last modified2026-09-28
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Description

The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging functionality without user interaction.

Weakness classification

  • CWE-862: Missing Authorization

Primary references