CVE-2022-48518

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-701 CWE-665

Affected software

No affected versions have been published.

Timeline

Published: Jul 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-485197.5Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality.CVE-2022-485207.5Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality.CVE-2022-485215.3An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing CVE-2022-485229.8In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalat CVE-2022-485385.3In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cacti_ldap CVE-2022-485417.1A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command CVE-2022-485455.5An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.CVE-2022-485476.1A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary CVE-2022-48559.8A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function o CVE-2022-485545.5File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.CVE-2022-48567.8A vulnerability has been found in Modbus Tools Modbus Slave up to 7.5.1 and classified as critical. Affected by this vulnerability is an unk CVE-2022-485607.5A use-after-free exists in Python through 3.9 via heappushpop in heapq.