CVE-2026-28544

Race condition in HarmonyOS printing module causing potential denial of service

Published Mar 5, 2026 CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Description
Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.

Analysis

AI-generated

Technical impact

A race condition exists in the printing module of Huawei HarmonyOS, allowing a successful exploitation to disrupt service availability. The flaw pertains to concurrent access to shared resources in the print subsystem, which can cause the system to hang or crash when multiple print jobs are processed simultaneously.

Affected Systems

Huawei HarmonyOS version 6.0.0 is affected. Devices running this operating system that utilize the built‑in printing functionality are at risk.

Risk and Exploitability

The vulnerability carries a CVSS score of 6.2, indicating moderate severity, and an EPSS score of less than 1%, suggesting a very low probability of exploitation at present. It is not listed in the CISA KEV catalog. The attack vector is inferred to be dependent on the ability to submit print jobs, potentially via local or network‑bound printing interfaces, but the exact exploitation path has not been publicly confirmed in the description.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Consult the Huawei March 2026 bulletin for any guidance or updates addressing the printing module race condition.
  • If a patch is not yet available, consider disabling the printing service or restricting print job access until the fix is deployed.
  • Monitor system logs and printing activity for abnormal behavior that may indicate exploitation attempts.

Generated by OpenCVE AI on April 17, 2026 at 12:47 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title Race condition in HarmonyOS printing module causing potential denial of service
Type Values Removed Values Added
First Time appeared Huawei
Huawei harmonyos
CPEs cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*
Vendors & Products Huawei
Huawei harmonyos
Type Values Removed Values Added
Description Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.
Weaknesses CWE-362
References
Metrics cvssV3_1

{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L'}

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Sources

Status
PUBLISHED
Assigner
huawei
Published
Updated
Mar 5, 2026, 2:52 PM
Reserved
Feb 28, 2026, 3:58 AM
Status
Analyzed
Published
Mar 5, 2026, 8:15 AM
Modified
Jun 17, 2026, 10:28 AM