CVE-2022-48518: Medium severity emui 5.0 vulnerability

Published Jul 6, 2023

Updated

Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance.

Affected Software

4 affected components

Huawei Emui=12.0.0

Huawei Emui=12.0.1

Huawei Harmonyos=2.0.0

Huawei Harmonyos=2.0.1

Event History

Jul 6, 2023

CVE Published

via MITRE·12:53 PM

Data Sourced

via MITRE·12:53 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2022-48518?

The severity of CVE-2022-48518 is considered high due to the potential for malicious applications to start without user consent.

How do I fix CVE-2022-48518?

To fix CVE-2022-48518, update affected devices to the latest patches provided by Huawei for EMUI and HarmonyOS.

Which versions are affected by CVE-2022-48518?

CVE-2022-48518 affects Huawei EMUI versions 12.0.0 and 12.0.1, as well as HarmonyOS versions 2.0.0 and 2.0.1.

What type of vulnerability is CVE-2022-48518?

CVE-2022-48518 is a vulnerability related to signature verification in the iaware system.

What could happen if CVE-2022-48518 is exploited?

If exploited, CVE-2022-48518 may allow malicious apps to launch at system startup by spoofing trusted app package names.