First published: Thu Jul 06 2023(Updated: )
Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei EMUI | =11.0.1 | |
Huawei EMUI | =12.0.0 | |
Huawei EMUI | =12.0.1 | |
Huawei EMUI | =13.0.0 | |
Huawei HarmonyOS | =2.0.0 | |
Huawei HarmonyOS | =2.0.1 | |
Huawei HarmonyOS | =3.0.0 | |
Huawei HarmonyOS | =3.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-48513 is classified as a high severity vulnerability due to potential exploitation allowing for out-of-bounds access.
To fix CVE-2022-48513, apply the latest security update provided by Huawei for affected versions of EMUI and HarmonyOS.
CVE-2022-48513 affects Huawei EMUI versions 11.0.1, 12.0.0, 12.0.1, and 13.0.0, as well as HarmonyOS versions 2.0.0, 2.0.1, 3.0.0, and 3.1.0.
Exploitation of CVE-2022-48513 can lead to unauthorized bypassing of identity verification, potentially exposing user data.
Users of affected Huawei devices running specific versions of EMUI and HarmonyOS should prioritize updating their software to mitigate this vulnerability.