Description
Out-of-bounds access vulnerability in the frequency modulation module.
Impact: Successful exploitation of this vulnerability may affect availability.
Published: 2026-02-06
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Availability disruption
Action: Apply Patch
AI Analysis

Impact

The vulnerability is an out‑of‑bounds memory access within the frequency modulation module of Huawei EMUI and HarmonyOS. An attacker who can trigger this fault could cause the affected system to crash or become unresponsive, leading to a denial‑of‑service condition. This weakness is classified as CWE‑416 and has been rated moderate in severity.

Affected Systems

Huawei devices running EMUI 14.0.0, 14.2.0, 15.0.0 or HarmonyOS versions 4.0.0 to 4.3.1 are impacted. The affected CPE entries in the official advisory list specify those operating system versions.

Risk and Exploitability

The assigned CVSS score of 5.5 reflects moderate impact. The EPSS score of less than 1% indicates a very low likelihood of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is inferred to be local or through a malicious application that can invoke the frequency modulation API; the official advisory does not specify a remote vector. Given the medium severity and low exploitation probability, the risk to unpatched devices remains moderate but should not be ignored.

Generated by OpenCVE AI on April 17, 2026 at 22:45 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest EMUI or HarmonyOS firmware update from Huawei when it becomes available.
  • Disable or restrict the frequency modulation feature in system settings until a vendor patch is released.
  • Monitor device logs and behavior for unexpected crashes or instability that may indicate exploitation attempts.

Generated by OpenCVE AI on April 17, 2026 at 22:45 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 17 Apr 2026 23:15:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Access in Frequency Modulation Module Leading to Availability Impact

Mon, 09 Feb 2026 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Huawei
Huawei emui
Huawei harmonyos
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:huawei:emui:14.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:emui:14.2.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:emui:15.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:harmonyos:4.3.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:harmonyos:4.3.1:*:*:*:*:*:*:*
Vendors & Products Huawei
Huawei emui
Huawei harmonyos

Fri, 06 Feb 2026 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 06 Feb 2026 09:30:00 +0000

Type Values Removed Values Added
Description Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability.
Weaknesses CWE-416
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: huawei

Published:

Updated: 2026-02-06T16:07:10.889Z

Reserved: 2026-01-28T06:05:05.257Z

Link: CVE-2026-24927

cve-icon Vulnrichment

Updated: 2026-02-06T16:05:26.109Z

cve-icon NVD

Status : Analyzed

Published: 2026-02-06T10:16:07.680

Modified: 2026-02-09T19:13:18.477

Link: CVE-2026-24927

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-17T23:00:12Z

Weaknesses