← Vulnerability feed

Vulnerability record · CVE-2026-34865 · published 13 April 2026

CVE-2026-34865: Huawei harmonyos heap-based buffer overflow vulnerability

Huawei · Harmonyos

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

10.0 CVSS 4.0 Critical EPSS 0.36% · top 72.5% CWE-122 · Heap-based buffer overflow
10.0CVSS 4.0 base score
0.36%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://consumer.huawei.com/en/support/bulletinwearables/2026/4/ Vendor Advisory

Track CVE-2026-34865 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-54617Huawei harmonyos stack-based buffer overflow vulnerabilityStack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability can cause RCE.EPSS 0.32%9.8CVE-2024-57959Huawei emui use after free vulnerabilityUse-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormal…EPSS 0.23%9.8CVE-2024-57961Huawei emui out-of-bounds write vulnerabilityOut-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.EPSS 0.28%9.8CVE-2024-32991Huawei emui vulnerabilityPermission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.55%9.8CVE-2023-52381Huawei emui code injection vulnerabilityScript injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and a…EPSS 0.45%9.8CVE-2023-52378Huawei emui vulnerabilityVulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perf…EPSS 0.46%9.8CVE-2023-52370Huawei emui classic buffer overflow vulnerabilityStack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access.EPSS 0.46%9.8CVE-2023-52103Huawei emui classic buffer overflow vulnerabilityBuffer overflow vulnerability in the FLP module. Successful exploitation of this vulnerability may cause out-of-bounds read.EPSS 0.46%

Source: NIST National Vulnerability Database (record CVE-2026-34865), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.