Use After Free Vulnerability in Huawei Communication Module
CVE-2026-34856

7.3HIGH

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
13 April 2026

What is CVE-2026-34856?

A Use After Free (UAF) vulnerability exists in the communication module of certain Huawei devices, allowing an attacker to exploit this flaw and potentially impact the availability of the affected systems. This vulnerability could enable unauthorized access or manipulation, underscoring the importance of timely updates and security measures for users.

Affected Version(s)

HarmonyOS 6.0.0

References

https://consumer.huawei.com/en/support/bulletin/2026/4/
https://consumer.huawei.com/en/support/bulletinwearables/...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.