Executive brief
A vulnerability exists in the communication module of Huawei HarmonyOS, which is the operating system used in various Huawei smartphones, tablets, and smartwatches. If exploited, this flaw could allow an attacker to disrupt the device's normal operations, potentially leading to service outages or system instability. This impact on availability could prevent users from accessing critical device functions or communication services.
Technical details
A Use-After-Free (UAF) vulnerability exists in the communication module of Huawei HarmonyOS 6.0.0. The vulnerability is associated with improper synchronization (CWE-362) and can be triggered locally. Successful exploitation allows an attacker to cause memory corruption, which primarily impacts system availability (denial of service) but may also have limited impacts on confidentiality and integrity. The vulnerability was addressed in the April 2026 security update for Huawei mobile devices and wearables.
Affected products
- Huawei HarmonyOS 6.0.0
Timeline
- 2026-04-08: patched: Huawei released security bulletin updates.
- 2026-04-13: disclosed: Initial NVD publication date.