CVE-2026-34851

Race Condition in HarmonyOS Event Notification Module Leading to Availability Issues

Published Apr 13, 2026 CVSS 3.1 · 2.2 Low EPSS < 1% KEV · Not listed
Description
Race condition vulnerability in the event notification module.
Impact: Successful exploitation of this vulnerability may affect availability.

Analysis

AI-generated

Technical impact

A race condition exists in the event notification module of Huawei HarmonyOS, allowing an attacker to manipulate event timing and potentially corrupt the notification handling. The flaw can cause services to crash or become unresponsive, resulting in a loss of availability for affected applications.

Affected Systems

Huawei HarmonyOS devices are affected. No specific version information is provided in the advisory.

Risk and Exploitability

The CVSS base score of 2.2 indicates low severity, yet the availability impact warrants attention. The exploit probability score is unavailable, and the vulnerability is not listed in the CISA known exploited vulnerabilities catalog. Based on the description, the likely attack vector involves local or privileged execution where an attacker can influence event timing to trigger the race condition. No additional exploitation conditions are detailed in the advisory.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Check Huawei’s support portal for updates or patches addressing the event notification race condition.
  • If a patch is unavailable, monitor system logs for abnormal event notification patterns and consider temporarily disabling the affected notification feature.
  • Ensure device firmware and operating system are kept up to date with the latest vendor releases to reduce exposure.

Generated by OpenCVE AI on April 13, 2026 at 06:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
CPEs cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*
cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title Race Condition in HarmonyOS Event Notification Module Leading to Availability Issues
Type Values Removed Values Added
First Time appeared Huawei
Huawei harmonyos
Vendors & Products Huawei
Huawei harmonyos
Type Values Removed Values Added
Description Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability.
Weaknesses CWE-362
References
Metrics cvssV3_1

{'score': 2.2, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L'}

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Sources

Status
PUBLISHED
Assigner
huawei
Published
Updated
Apr 13, 2026, 6:06 PM
Reserved
Mar 31, 2026, 1:11 AM
Status
Analyzed
Published
Apr 13, 2026, 4:16 AM
Modified
Oct 26, 2026, 9:10 PM