Critical
CVSS: 9.8
Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63.
Medium
CVSS: 5.3
Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation.
High
CVSS: 7.5
Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage risk.
High
CVSS: 8.1
The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks.