Description
Out-of-bounds write vulnerability in the file system.
Impact: Successful exploitation of this vulnerability may affect availability.
Published: 2026-04-13
Score: 6.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Availability
Action: Patch Now
AI Analysis

Impact

The vulnerability is an out‑of‑bounds write in HarmonyOS’s file system driver. This flaw can corrupt or overwrite critical file system data, potentially leading to system instability or denial of service. The official description notes that successful exploitation may affect availability, which could impede device operation for affected users.

Affected Systems

Huawei HarmonyOS devices are impacted. The CVE does not list affected firmware versions, so administrators should consult Huawei’s consumer support bulletin for specific release information and verify whether their installations contain the vulnerability.

Risk and Exploitability

The CVSS base score of 6.7 indicates a moderate severity vulnerability. No EPSS score is available, and the issue is not cataloged in CISA’s Known Exploited Vulnerabilities list, suggesting limited publicly documented exploitation activity. The exact attack vector is not detailed; based on the description, it is inferred that an attacker must trigger the out‑of‑bounds write, potentially via a malicious file or application, but the official advisory does not disclose the exploit path.

Generated by OpenCVE AI on April 13, 2026 at 06:23 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Check the Huawei consumer support bulletin for a firmware update or patch that addresses the out‑of‑bounds write issue.
  • If a patch is available, apply it to all HarmonyOS devices immediately to prevent availability impact.
  • Until a patch is deployed, monitor file system activity and restrict write permissions for non‑essential applications to reduce the risk of exploitation.

Generated by OpenCVE AI on April 13, 2026 at 06:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 13 Apr 2026 14:30:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write Vulnerability in HarmonyOS File System

Mon, 13 Apr 2026 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Mon, 13 Apr 2026 13:00:00 +0000

Type Values Removed Values Added
First Time appeared Huawei
Huawei harmonyos
Vendors & Products Huawei
Huawei harmonyos

Mon, 13 Apr 2026 05:15:00 +0000

Type Values Removed Values Added
Description Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}


Subscriptions

Huawei Harmonyos
cve-icon MITRE

Status: PUBLISHED

Assigner: huawei

Published:

Updated: 2026-04-13T13:18:49.707Z

Reserved: 2026-03-31T01:11:13.701Z

Link: CVE-2026-34863

cve-icon Vulnrichment

Updated: 2026-04-13T13:18:46.186Z

cve-icon NVD

Status : Undergoing Analysis

Published: 2026-04-13T05:16:04.250

Modified: 2026-04-13T15:01:43.663

Link: CVE-2026-34863

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-13T12:53:14Z

Weaknesses