Description
Type confusion vulnerability in the camera module.
Impact: Successful exploitation of this vulnerability may affect availability.
Published: 2026-02-06
Score: 4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Availability (potential device unavailability due to camera module crash)
Action: Apply Patch
AI Analysis

Impact

The vulnerability is a type confusion flaw in HarmonyOS’s camera module, which can cause incorrect type handling and lead to crashes that disrupt device operation. When successfully triggered, this flaw may expose the device to temporary or permanent service interruption, affecting users who rely on camera functionality for daily tasks or critical applications. The weakness corresponds to CWE-416 (Use After Free) and CWE-843 (Improper Type Conversion).

Affected Systems

The affected system is Huawei HarmonyOS version 6.0.0, as listed in the Common Platform Enumeration string. No other versions or products are mentioned, so the impact is confined to devices running this specific HarmonyOS release.

Risk and Exploitability

The score reflects moderate severity (CVSS 4.0) and very low exploitation probability (<1% EPSS). The vulnerability is not cataloged in the CISA KEV list. Based on the description, the attack vector is inferred to be local, likely requiring the user or a local application with camera access to trigger the type confusion. No remote exploitation path is documented, so defenders should focus on local threat mitigation.

Generated by OpenCVE AI on April 17, 2026 at 22:51 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Check Huawei’s support bulletin for HarmonyOS 6.0.0 and install the latest firmware update that addresses the camera module type confusion flaw.
  • If an immediate patch is not available, remove or disable camera functionality through system settings or application permission policies to prevent the vulnerability from being exercised.
  • Continuously monitor device logs for unexpected camera‑module crashes or service restarts, and validate that the patch or restriction has eliminated the recurrence.

Generated by OpenCVE AI on April 17, 2026 at 22:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 17 Apr 2026 23:15:00 +0000

Type Values Removed Values Added
Title Type Confusion Vulnerability in HarmonyOS Camera Module

Tue, 10 Feb 2026 18:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-843
CPEs cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*

Mon, 09 Feb 2026 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Huawei
Huawei harmonyos
Vendors & Products Huawei
Huawei harmonyos

Fri, 06 Feb 2026 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 06 Feb 2026 08:45:00 +0000

Type Values Removed Values Added
Description Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability.
Weaknesses CWE-416
References
Metrics cvssV3_1

{'score': 4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}


Subscriptions

Huawei Harmonyos
cve-icon MITRE

Status: PUBLISHED

Assigner: huawei

Published:

Updated: 2026-02-06T17:02:11.272Z

Reserved: 2026-01-28T06:05:05.256Z

Link: CVE-2026-24914

cve-icon Vulnrichment

Updated: 2026-02-06T17:00:47.023Z

cve-icon NVD

Status : Analyzed

Published: 2026-02-06T09:15:49.490

Modified: 2026-02-10T17:49:14.833

Link: CVE-2026-24914

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-17T23:00:12Z

Weaknesses