Tecno Tranfacmode Permission Bypass Vulnerability Allowing Intent-Based Access to ADB Debugging

A permission bypass vulnerability has been identified in the Tecno Tranfacmode application, specifically within the MainActivity component. This vulnerability allows third-party apps to access ADB debugging functionality by constructing intents, without any user interaction. The issue arises from the lack of proper permission controls in the application.

Impact

Exploitation of this vulnerability allows third-party applications to access ADB debugging features, potentially leading to unauthorized actions or changes on the device.

Remediation

This vulnerability has been fixed. Users can refer to the TECNO Security Update page for details on the latest security patches for their device model.