CVE-2026-34853

Received Received - Intake

Permission Bypass in Huawei LBS Module Affecting Availability

Publication date: 2026-04-13

Last updated on: 2026-04-16

Assigner: Huawei Technologies

Description

Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-13

Last Modified

2026-04-16

Generated

2026-07-06

AI Q&A

2026-04-13

EPSS Evaluated

2026-07-05

NVD

CVE-2026-34853

EUVD

EUVD-2026-21798

Affected Vendors & Products

Vendor	Product	Version / Range
huawei	harmonyos	4.0.0
huawei	harmonyos	4.2.0
huawei	harmonyos	4.3.0
huawei	harmonyos	4.3.1
huawei	emui	14.0.0
huawei	emui	15.0.0
huawei	emui	14.2.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-270	The product does not properly manage privileges while it is switching between different contexts that have different privileges or spheres of control.

Attack-Flow Graph

Executive Summary

CVE-2026-34853 is a permission bypass vulnerability located in the Location-Based Services (LBS) module of Huawei devices running HarmonyOS version 4.3.0.

This vulnerability allows an attacker to bypass permission controls, potentially gaining unauthorized access to certain functions or data within the LBS module.

Impact Analysis

Successful exploitation of this vulnerability may impact the availability of the affected system, potentially disrupting normal operations.

The severity of this vulnerability is classified as high, indicating significant risk if exploited.

Mitigation Strategies

To mitigate the CVE-2026-34853 vulnerability, you should apply the April 2026 Huawei Vision security update which includes patches addressing this permission bypass issue in the LBS module.

Ensuring your Huawei devices running HarmonyOS version 4.3.0 or affected versions are updated promptly will enhance system security and stability, reducing the risk of exploitation.

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Hi! I’m here to help you understand CVE-2026-34853. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70