Tecno Pova7 Pro 5G

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-0634 Apr 02, 08:48 HIGH This Week

Local privilege escalation via command injection in TECNO Pova7 Pro 5G AssistFeedbackService allows unprivileged Android applications to execute arbitrary code with system privileges. The vulnerability affects all TECNO Pova7 Pro 5G firmware versions and requires local app installation but no user interaction or special permissions beyond app execution capability. No public exploit code or active exploitation has been confirmed at time of analysis.

RCE Google Command Injection Tecno Pova7 Pro 5G Tecno Mobile

NVD

CVSS 3.1

7.8

EPSS

0.3%

CVE-2026-0634

EPSS 0% CVSS 7.8

HIGH This Week

Local privilege escalation via command injection in TECNO Pova7 Pro 5G AssistFeedbackService allows unprivileged Android applications to execute arbitrary code with system privileges. The vulnerability affects all TECNO Pova7 Pro 5G firmware versions and requires local app installation but no user interaction or special permissions beyond app execution capability. No public exploit code or active exploitation has been confirmed at time of analysis.

RCE Google Command Injection +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy