Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| TECNO Mobile | TECNO Pova7 Pro 5G | unaffected |
|
No data.
No data.
No data.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://security.tecno.com/SRC/securityUpdates |
|
History
Thu, 02 Apr 2026 09:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection. | |
| Title | Code Execution in AssistFeedbackService on TECNO Pova7 Pro 5G | |
| Weaknesses | CWE-88 | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: TECNOMobile
Published:
Updated: 2026-04-02T08:48:45.687Z
Reserved: 2026-01-06T01:33:04.882Z
Link: CVE-2026-0634
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-04-02T09:16:20.397
Modified: 2026-04-02T09:16:20.397
Link: CVE-2026-0634
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses