User After Free Vulnerability in Huawei Time and Time Zone Module
CVE-2026-49306

3.3LOW

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
17 August 2026

What is CVE-2026-49306?

A user after free vulnerability exists in the time and time zone module of Huawei products, potentially compromising system stability and availability. Successful exploitation may allow attackers to manipulate system resources, leading to unintended behaviors.

Affected Version(s)

HarmonyOS 6.1.0

References

https://consumer.huawei.com/en/support/bulletin/2026/8/
https://consumer.huawei.com/en/support/bulletinvision/202...
https://consumer.huawei.com/en/support/bulletinwearables/...

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.