High · 7.5 CVE-2022-48295 EUVD-2022-50995GHSA-2r47-fxrj-f7vv

The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems (b…

Published Feb 9, 2023 · Updated Mar 25, 2025 · Assigned by huawei

Vendor: Huawei Product: EMUI Product: HarmonyOS Category: Network devices

Description

The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems (batch installation of applications).

Affected products

Vendor	Product	Affected	Fixed
Huawei	HarmonyOS	2.0	—
Huawei	EMUI	12.0.1, 12.0.0, 11.0.1	—

References

https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474
https://consumer.huawei.com/en/support/bulletin/2023/2/