Huawei vulnerabilities and threats

CVE-2026-65200 is an integer underflow vulnerability in Huawei openBMC's device-management process. The flaw occurs in the parsing of PLDM-over-MCTP and NCSI-over-MCTP responses, where the code subtracts a fixed header size from a device-supplied response length without checking for lower bounds. This can cause the length to wrap around to a large value, leading to out-of-bounds reads. The vulnerability affects the base PLDM control class and Huawei NCSI driver, making it reachable by any PLDM endpoint or Huawei NIC on the internal management bus. The CVSS score is 3.5, indicating low severity. No known exploits are reported in the wild, and no patch information is provided.

CVE-2026-65199 is a medium severity vulnerability in Huawei openBMC where SNMP callers are incorrectly assigned full administrative privileges. Specifically, authenticated SNMP users with low privilege can execute backend operations as administrators due to the 'special_users' group including a pseudo-user with all privileges. This affects versions from 0 up to and including 26.06. The vulnerability does not impact confidentiality but can lead to integrity and availability issues.

Huawei openUBMC contains a hard-coded cryptographic key used for SNMPv3 authentication and encryption. This key is the same across units and is not changed by administrator password resets, allowing an attacker who obtains the key from the open-source build to authenticate and decrypt SNMPv3 traffic on any affected device. SNMP access grants full administrative privileges, including system reset and firmware upgrades, increasing the risk of device compromise.

Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability.

Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability.

DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-81647 is an out-of-bounds read vulnerability in the graphics module of Huawei HarmonyOS version 6.1.0. Exploitation may lead to availability impact, such as a denial of service. The vulnerability is classified as CWE-680 (Integer Overflow to Buffer Overflow). It has a CVSS 3.1 base score of 5.3, indicating medium severity. No public exploits or patches are currently documented.

CVE-2026-81646 is an out-of-bounds read vulnerability in the graphics module of Huawei HarmonyOS version 6.1.0. Exploitation may impact system availability and cause limited confidentiality and integrity loss. The vulnerability has a medium severity with a CVSS score of 5.9.

DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability.

Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability.

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49303 is a permission control vulnerability in the notification module of Huawei HarmonyOS. Exploiting this flaw may impact system availability. The vulnerability has a medium severity rating with a CVSS score of 5.1. It affects specific versions of HarmonyOS including 4.3.1, 4.3.0, 4.2.0, 4.0.0, 15.0.0, 14.2.0, and 14.0.0. No known exploits are reported in the wild, and no patch information is provided.

Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-49308 is a permission control vulnerability in the clipboard module of Huawei HarmonyOS version 6.1.0. Exploitation may lead to unauthorized disclosure of service confidentiality. The vulnerability has a medium severity with a CVSS score of 5.5. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-49306 is a use-after-free (UAF) vulnerability in the time and time zone module of Huawei HarmonyOS version 6.1.0. Successful exploitation may impact system availability. The vulnerability has a low CVSS score of 3.3 and does not affect confidentiality or integrity. There is no information about an available patch or official remediation at this time.