CVE-2022-48518CWE-701

CVE-2022-48518: vulnerability in Huawei EMUI

Published · Updated

Follow this CVE+ Monitor HarmonyOS+ Monitor EMUI

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.1%
Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance.
Affected products
Huawei · EMUIHuawei · HarmonyOS
Related CVEs — Huawei EMUI

In the same product, most dangerous first.

CVE-2021-37095—CVE-2021-37095EPSS 1.4%CVE-2021-40050—CVE-2021-40050EPSS 1.1%CVE-2021-39979—CVE-2021-39979EPSS 1.1%CVE-2021-40014—CVE-2021-40014EPSS 1.0%CVE-2021-37022—CVE-2021-37022EPSS 1.0%CVE-2021-22387—CVE-2021-22387EPSS 0.9%