Out-of-Bounds Write Vulnerability in Huawei File System Module
CVE-2026-24928

5.8MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Emui
Vendor
CVE Published:
6 February 2026

What is CVE-2026-24928?

This vulnerability involves an out-of-bounds write in the Huawei File System Module, which could potentially allow an attacker to manipulate data outside the designated buffer boundaries. If successfully exploited, this may lead to unauthorized access to sensitive data and impact the confidentiality of services running on affected systems.

Affected Version(s)

EMUI 14.2.0

HarmonyOS 4.2.0

References

https://consumer.huawei.com/en/support/bulletin/2026/2/

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.