What’s Vulnerable › Vulnerabilities

CVE-2025-14817: Factory Mode App Exists Privilege Escalation Issue Allowing Third-Party Apps to Open ADB

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-17 · updated 2026-09-28
• Weakness: CWE-862

Description

The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging functionality without user interaction.

Affected products

• Transsion Hios: 14.0.0

References

• https://security.tecno.com/SRC/blogdetail/434?lang=en_US
• https://security.tecno.com/SRC/securityUpdates

Get alerted when CVE-2025-14817 or the next vulnerability affects your stack