Use After Free Vulnerability in Huawei Screen Management Module
CVE-2026-34849

2.5LOW

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
13 April 2026

What is CVE-2026-34849?

A Use After Free (UAF) vulnerability exists in the screen management module of Huawei products. An attacker may exploit this vulnerability to manipulate memory allocations, which could lead to unpredictable behavior and adverse effects on system availability. Organizations using the affected Huawei products should evaluate their systems and apply necessary updates promptly to safeguard against potential exploitation.

Affected Version(s)

HarmonyOS 6.0.0

HarmonyOS 5.1.0

References

https://consumer.huawei.com/en/support/bulletin/2026/4/

CVSS V3.1

Score:
2.5
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.