Design/Logic Flaw

The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems batch installation of applications...

CVE-2022-48295

CVE-2022-48295 affects Huawei HarmonyOS where the IHwAntiMalPlugin interface performs no permission verification. The underlying root cause is lack of access checks on this interface, enabling an attacker to trigger a flooding/batch installation scenario. The CVSS data indicates network access wi...