CVE-2026-34862

Race Condition in HarmonyOS Power Consumption Statistics Module

View on CVE.org
Published Apr 13, 2026 CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Description
Race condition vulnerability in the power consumption statistics module.
Impact: Successful exploitation of this vulnerability may affect availability.

Analysis

AI-generated

Technical impact

A race condition exists in Huawei HarmonyOS’s power consumption statistics module. The flaw allows concurrent operations to interfere, which may produce inaccurate or corrupted power usage data, leading to potential disruptions in system stability and the availability of device functions.

Affected Systems

The vulnerability affects devices running Huawei HarmonyOS. No specific version or product line is identified, so any HarmonyOS installation that includes the power statistics component could be impacted.

Risk and Exploitability

The CVSS score of 6.3 indicates a moderate severity focused on availability. EPSS information is unavailable, and the issue is not listed in the CISA KEV catalog, suggesting no known public exploitation. The exact attack vector (local, remote, privilege level) is not specified in the available data, so the conditions required for exploitation remain uncertain.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Review Huawei consumer support bulletins for updates addressing this race condition
  • Apply any referenced HarmonyOS patch or update as soon as it becomes available
  • If a patch is not yet released, monitor device power logs and system stability for abnormal behavior
  • Where possible, limit use of applications that interact with the power statistics subsystem to reduce potential impact

Generated by OpenCVE AI on April 13, 2026 at 06:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
CPEs cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*
Type Values Removed Values Added
Title Race Condition in HarmonyOS Power Consumption Statistics Module
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Huawei
Huawei harmonyos
Vendors & Products Huawei
Huawei harmonyos
Type Values Removed Values Added
Description Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnerability may affect availability.
Weaknesses CWE-362
References
Metrics cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H'}
Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Sources

Status
PUBLISHED
Assigner
huawei
Published
Updated
Apr 13, 2026, 1:24 PM
Reserved
Mar 31, 2026, 1:11 AM

View source JSON

Updated
Apr 13, 2026, 1:24 PM

JSON

Status
Analyzed
Published
Apr 13, 2026, 5:16 AM
Modified
Oct 26, 2026, 9:10 PM

View source JSON

No data.

Updated
Apr 13, 2026, 12:53 PM

JSON