High · 7.5 CVE-2022-48289 EUVD-2022-50989GHSA-5rg3-6jx4-c2qf

The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may af…

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by huawei

Vendor: Huawei Product: EMUI Product: HarmonyOS Category: Network devices

Description

The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.

Affected products

Vendor	Product	Affected	Fixed
Huawei	HarmonyOS	2.0, 3.0.0	—
Huawei	EMUI	12.0.1	—

References

https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474
https://consumer.huawei.com/en/support/bulletin/2023/2/