Description
Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability.
Published: 2026-05-15
Score: 2.8 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A stack overflow vulnerability exists in Huawei HarmonyOS's media platform. Successful exploitation may lead to service disruption, potentially causing application crashes or denial of service. This weakness arises from improper memory bounds handling and is classified as CWE‑121.

Affected Systems

The vulnerability is known to affect devices running Huawei HarmonyOS, including consumer smartphones, laptops, vision devices, and wearables. No specific version information is provided, so all HarmonyOS releases that include the media platform are potentially vulnerable until a patch is issued.

Risk and Exploitability

The CVSS score of 2.8 indicates a moderate risk level, with the primary impact being availability. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, suggesting limited public exploitation data. Exploitation likely requires local or privileged access to trigger the media platform, implying a low‑to‑moderate likelihood under typical attack scenarios. The lack of disclosed exploits reduces immediate concern, but the availability impact warrants swift remediation.

Generated by OpenCVE AI on May 15, 2026 at 11:24 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest HarmonyOS update that addresses the media platform stack overflow.
  • If an update is not yet available, disable or uninstall the media platform component to prevent exploitation.
  • Restrict third‑party application access to media services and monitor device logs for abnormal memory usage or crashes.
  • Contact Huawei support for guidance and to confirm when a patch is released.

Generated by OpenCVE AI on May 15, 2026 at 11:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 15 May 2026 12:15:00 +0000

Type Values Removed Values Added
First Time appeared Huawei
Huawei harmonyos
Vendors & Products Huawei
Huawei harmonyos

Fri, 15 May 2026 11:45:00 +0000

Type Values Removed Values Added
Title HarmonyOS Media Platform Stack Overflow Affecting Availability

Fri, 15 May 2026 11:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 15 May 2026 10:00:00 +0000

Type Values Removed Values Added
Description Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability.
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 2.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L'}


Subscriptions

Huawei Harmonyos
cve-icon MITRE

Status: PUBLISHED

Assigner: huawei

Published:

Updated: 2026-05-15T11:04:36.538Z

Reserved: 2026-04-23T01:42:44.928Z

Link: CVE-2026-41963

cve-icon Vulnrichment

Updated: 2026-05-15T11:04:30.277Z

cve-icon NVD

Status : Deferred

Published: 2026-05-15T10:16:34.987

Modified: 2026-05-15T14:08:50.797

Link: CVE-2026-41963

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-15T12:00:15Z

Weaknesses