Executive brief
A design flaw exists in the Expedition mode of Huawei HarmonyOS devices. If exploited, this vulnerability could allow an attacker to disrupt the device's availability, potentially causing system instability or service outages. Users are advised to apply the July 2026 security updates to maintain device reliability.
Technical details
A design defect (CWE-701) exists in the Expedition mode component of Huawei HarmonyOS 6.1.0. The vulnerability is classified as a local attack vector requiring high privileges and user interaction (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H). Successful exploitation allows an attacker to impact the availability of the system. The issue was addressed in the Huawei July 2026 security update.
Affected products
- Huawei HarmonyOS 6.1.0
Timeline
- 2026-07-08: patched: Huawei released the July 2026 security bulletin.
- 2026-07-15: disclosed: NVD published the CVE record.