VULNERABILITY INTELLIGENCE

CVE-2022-48518

CVSS score5.5 MEDIUM
EPSS probability0.13%
CISA KEVNot currently listed
Published2023-07-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance.

Weakness classification

  • psirt@huawei.com: CWE-701
  • nvd@nist.gov: CWE-665

Primary references