What’s Vulnerable › Vulnerabilities

CVE-2022-48518

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-07-06 · updated 2026-06-17
• Weakness: CWE-701

Description

Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance.

Affected products

• Huawei EMUI: 12.0.0, 12.0.1
• Huawei HarmonyOS: 2.0.0, 2.0.1

References

• https://consumer.huawei.com/en/support/bulletin/2023/7/
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
• https://consumer.huawei.com/en/support/bulletin/2023/7/
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858

Get alerted when CVE-2022-48518 or the next vulnerability affects your stack