This vulnerability (CVE-2026-41987) involves improper permission controls within the app management module of Huawei HarmonyOS. The weakness falls under CWE-264, which concerns permissions, privileges, and access controls. Successful exploitation could lead to an impact on system availability, though confidentiality and integrity are not affected. The CVSS 3.1 vector indicates local attack vector with low attack complexity, no privileges required, no user interaction, and unchanged scope. The affected versions are explicitly listed as 4.0.0, 4.2.0, 4.3.0, 4.3.1, and 4.3.3. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

The impact is limited to availability disruption of the affected HarmonyOS systems. There is no impact on confidentiality or integrity according to the CVSS vector. The vulnerability could allow an attacker with local access to cause denial of service or similar availability issues in the app management module.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Huawei's advisories for updates. No specific mitigations are indicated in the available data.