Race Condition Vulnerability in Huawei's Maintenance and Diagnostics Module
CVE-2026-28543

4.4MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
5 March 2026

What is CVE-2026-28543?

A race condition vulnerability has been identified in Huawei's Maintenance and Diagnostics Module, which may impact the availability of affected products. This weakness arises when multiple processes access shared resources out of order, potentially leading to inconsistent states. Exploitation of this flaw could lead to unavailability issues for users, making it imperative for Huawei product users to be aware and take necessary precautions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

HarmonyOS 6.0.0

HarmonyOS 5.1.0

References

https://consumer.huawei.com/en/support/bulletin/2026/3/
https://consumer.huawei.com/en/support/bulletinwearables/...
https://consumer.huawei.com/en/support/bulletinlaptops/20...

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.