CVE-2025-14817 — Factory Mode App Exists Privilege Escalation Issue Allowing Third-Party Apps to Open ADB

CVE-2025-14817

Factory Mode App Exists Privilege Escalation Issue Allowing Third-Party Apps to Open ADB PUBLISHED

Description (CNA)

The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging functionality without user interaction.

Affected (CNA)

Vendor / product	Versions
TECNO / Tecno Pova6 Pro 5G	affected HiOS V14.0.0

CWE

CWE-862

References

https://security.tecno.com/SRC/securityUpdates
https://security.tecno.com/SRC/blogdetail/434?lang=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.