Skip to main content
CVE-2026-49315VulnerabilityPublished 09/09/2026

CVE-2026-49315: CWE-264 Permissions, Privileges, and Access Controls in Huawei HarmonyOS

Affects Huawei HarmonyOSSource CVE Database V5

CVSS 3.1 base score
7.1High
Exploitation

Not in CISA KEV, no exploitation reported

EPSS
0.1% chance of exploitation in 30 days – higher than 1% of CVEs
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

What to do

AI-suggested

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for updates from Huawei regarding this vulnerability.

Affected software

ProductAffectedFixed in
HuaweiHarmonyOSAffected
  • =4.3.3
  • =4.3.1
  • =4.3.0
  • =4.2.0
  • =4.0.0
Fixed in–
HuaweiEMUIAffected
  • =16.0.0
  • =15.0.0
  • =14.2.0
  • =14.0.0
Fixed in–
GitHub Actionshuawei/harmonyospkg:github/huawei/harmonyosOther threatsAffected
  • =4.0.0
  • =4.2.0
  • =4.3.0
  • =4.3.1
  • =4.3.3
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability.

Weaknesses

References