Permission Control Vulnerability in Huawei AMS Module
CVE-2026-24920

6.2MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Emui
Vendor
CVE Published:
6 February 2026

What is CVE-2026-24920?

A permission control vulnerability in the Huawei AMS module could allow unauthorized access, affecting system availability. Exploiting this vulnerability could potentially disrupt services, emphasizing the need for timely updates and robust security practices. Users are advised to apply the latest patches to safeguard their systems.

Affected Version(s)

EMUI 15.0.0

EMUI 14.2.0

HarmonyOS 4.3.1

References

https://consumer.huawei.com/en/support/bulletin/2026/2/
https://consumer.huawei.com/en/support/bulletinvision/202...

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.