CVE-2026-28545

Race Condition in HarmonyOS Printing Module Causing Availability Impact

Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-28539

Certificate Management Data Processing Vulnerability Threatening Service Confidentiality

Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24925

Heap-Based Buffer Overflow in Image Module

Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24926

Out‑of‑Bounds Write in HarmonyOS Camera Module

Out-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24914

Type Confusion Vulnerability in HarmonyOS Camera Module

Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24915

Out‑of‑Bounds Read in HarmonyOS Media Subsystem

Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24921

Address Read Vulnerability in HarmonyOS HDC Module Leading to Information Disclosure and Potential Downtime

Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24922

Buffer Overflow in HarmonyOS HDC Module

Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24923

Permission Control Flaw in HarmonyOS HDC Module Allows Confidentiality Impact

Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24929

Out-of-bounds Read in HarmonyOS Graphics Module Causing Availability Impact

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24930

Untrusted Resource Use After Free in HarmonyOS Graphics Module Causing Denial of Service

UAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24931

Improper Security Check in HarmonyOS Card Module Enabling Confidentiality Exposure

Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24916

Identity Authentication Bypass in HarmonyOS Window Module

Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24919

Out‑of‑Bounds Write in Huawei DFX Module Leading to Availability Impact

Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Emui Harmonyos

CVE-2026-24924

Improper Permission Control in HarmonyOS Print Module

Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24927

Out-of-Bounds Access in Frequency Modulation Module Leading to Availability Impact

Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Emui Harmonyos

CVE-2026-34866

Out‑of‑Bounds Write in HarmonyOS WEB Module Leads to Availability and Confidentiality Impact

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-34865

HarmonyOS Web Module Out-of-Bounds Write Vulnerability

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-34855

Kernel Module Out‑Bounds Write Leading to Availability and Confidentiality Issues

Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Emui Harmonyos

CVE-2026-34867

Double‑Free Vulnerability in HarmonyOS Multi‑Mode Input System

Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos