CVEvulnerability

CVE-2022-48518

5.5 MEDIUM Published 2023-07-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-07-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weaknesses
CWE-665, CWE-701

Description

Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance.

Affected configurations

• huawei emui 12.0.0 • huawei emui 12.0.1 • huawei harmonyos 2.0.0 • huawei harmonyos 2.0.1

Related

Weakness · CWE (2)

  • CWE-665 Improper Initialization weakness
  • CWE-701 Weaknesses Introduced During Design view

References