Null Pointer Dereference in ArkWeb Module by Huawei
CVE-2026-101175

4.3MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
2 November 2026

What is CVE-2026-101175?

A null pointer dereference vulnerability in the ArkWeb module may lead to unintended service interruptions. Exploiting this vulnerability can potentially disrupt the availability of affected services, making it crucial for users to be aware of the risks and take necessary precautions.

Affected Version(s)

HarmonyOS 6.1.0

HarmonyOS 7.0.0

References

https://consumer.huawei.com/en/support/bulletin/2026/10/
https://consumer.huawei.com/en/support/bulletinvision/202...
https://consumer.huawei.com/en/support/bulletinlaptops/20...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.