QwikSec

Security Database

CVE

CWE

Training

CVE-2022-48518

Published: Jul 6, 2023

Modified: Nov 19, 2024

PUBLISHED

Description

Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance.

Vendor	Product	Versions
Huawei	HarmonyOS	affected `2.0.0` affected `2.0.1`
Huawei	EMUI	affected `12.0.0` affected `12.0.1`

Weaknesses (CWE)

References

https://consumer.huawei.com/en/support/bulletin/2023/7/

https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.