Permission Bypass Vulnerability in LBS Module of Huawei Products
CVE-2026-34853

7.7HIGH

Key Information:

Vendor

Huawei
Status
Harmonyos
Emui
Vendor
CVE Published:
13 April 2026

What is CVE-2026-34853?

A permission bypass vulnerability exists within the LBS module of specific Huawei products. This flaw allows unauthorized users to gain elevated permissions, potentially impacting the system's availability. Exploiting this vulnerability could lead to unauthorized access and manipulation of resources, posing significant risks to user data and overall system integrity. Users are urged to update their devices to the latest security patches to mitigate risks associated with this vulnerability.

Affected Version(s)

EMUI 15.0.0

EMUI 14.2.0

EMUI 14.0.0

References

https://consumer.huawei.com/en/support/bulletin/2026/4/
https://consumer.huawei.com/en/support/bulletinvision/202...

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.