CVE-2022-48518

State: Published
Severity: Not scored
Published: Jul 6, 2023
Updated: Nov 19, 2024
Reserved: Jun 29, 2023

Description

Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance.

Scores

The record has no CVSS score.

Weaknesses

CWE-701 Weaknesses Introduced During Design

Affected Products

Product	Versions
HarmonyOSHuawei	2.0.0Affected 2.0.1Affected
EMUIHuawei	12.0.0Affected 12.0.1Affected

References

https://consumer.huawei.com/en/support/bulletin/2023/7/
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.