Executive brief
A security flaw exists in the Bluetooth module of Huawei smartphones and tablets. This vulnerability could allow an unauthorized user or malicious application to interfere with Bluetooth functionality, potentially causing the service to become unavailable. This may disrupt the use of wireless accessories like headphones, watches, or file-sharing features.
Technical details
A permission control vulnerability (CWE-264) exists within the Bluetooth module of Huawei's HarmonyOS and EMUI operating systems. The flaw is characterized by improper enforcement of access rights, which can be exploited locally without requiring specific user privileges or interaction. Successful exploitation allows an attacker to impact the availability of Bluetooth services and potentially gain limited access to information. The vulnerability affects HarmonyOS versions 4.0.0 through 4.3.1 and EMUI versions 14.0.0 through 15.0.0. Huawei has addressed this issue in their July 2026 security update.
Affected products
- Huawei HarmonyOS 4.0.0, 4.2.0, 4.3.0, 4.3.1
- Huawei EMUI 14.0.0, 14.2.0, 15.0.0
Timeline
- 2026-07-08: patched: Huawei released the security bulletin containing the fix.
- 2026-07-15: disclosed: NVD published the CVE details.