Description (CNA)
Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Huawei / HarmonyOS | affected 2.0.0; affected 2.0.1 |
| Huawei / EMUI | affected 12.0.0; affected 12.0.1 |
CWE
CWE-701
References
- https://consumer.huawei.com/en/support/bulletin/2023/7/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.