Huawei HarmonyOS Security Restriction Bypass Vulnerability (CNVD-2023-70288)

Huawei HarmonyOS is an operating system from Huawei (China). It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security restriction bypass vulnerability that stems from the use of insecure signatures in the osulogin module, which can be exploited by an attacker to cause osulogin to be overwritten by malicious modifications.