Huawei vulnerabilities and threats

CVE-2026-34852 is a medium severity vulnerability in Huawei HarmonyOS version 6.0.0 involving a stack overflow caused by a loop with an unreachable exit condition (infinite loop) in the media platform. Successful exploitation may impact system availability. There is no current information on an official patch or remediation from the vendor. No known exploits are reported in the wild.

CVE-2026-34851 is a race condition vulnerability in the event notification module of Huawei HarmonyOS versions 5.1.0 and 6.0.0. Exploitation may impact system availability but does not affect confidentiality or integrity. The vulnerability has a low severity rating with a CVSS score of 2.2. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-34850 is a race condition vulnerability in the notification service of Huawei HarmonyOS versions 5.1.0 and 6.0.0. Exploitation of this flaw may impact system availability but does not affect confidentiality or integrity. The vulnerability has a low severity rating and a CVSS score of 1.9. There is no information about available patches or official remediation from the vendor. No known exploits are reported in the wild.

Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability.

Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability.

Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability.

Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability.

Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability.

Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect availability.

Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability.

Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability.

Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity.

Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability.

Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability.

Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.

Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.