CVE-2026-28552

Published: Mar 5, 2026Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability.

Affected (9)

Products: Huawei: Emui, Harmonyos

2 products

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Huawei Emui	Version 14.0.0
Huawei Emui	Version 14.2.0
Huawei Emui	Version 15.0.0
Huawei Harmonyos	Version 4.0.0
Huawei Harmonyos	Version 4.2.0
Huawei Harmonyos	Version 4.3.0
Huawei Harmonyos	Version 4.3.1
Huawei Harmonyos	Version 5.1.0
Huawei Harmonyos	Version 6.0.0

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (3)

https://consumer.huawei.com/en/support/bulletin/2026/3/

Source: psirt@huawei.com

Vendor Advisory

https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/

Source: psirt@huawei.com

Vendor Advisory

https://consumer.huawei.com/en/support/bulletinwearables/2026/3/

Source: psirt@huawei.com

Vendor Advisory

Timeline

No history available yet.