CVE-2026-0634

CVE-2026-0634: Code Execution in AssistFeedbackService on TECNO Pova7 Pro 5G

Vendor Tecno Mobile

Product TECNO Pova7 Pro 5G

Weakness CWE-88

Published April 2, 2026

Last update April 2, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection.

Key dates

02Disclosure timeline

April 2, 2026 CVE published

April 2, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-0634 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/88.html

Related vulnerabilities

04Related CVE

CVE-2025-35005 Microhard Bullet-LTE and IPn4Gii AT+MFMAC Argument Injection CVE-2026-25689 CVE-2025-59433 @conventional-changelog/git-client has an Argument Injection vulnerability CVE-2026-24739 Symfony has incorrect argument escaping under MSYS2/Git Bash on Windows that can lead to destructive file operations CVE-2024-7573 Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injection