CVE-2026-34857

Received Received - Intake

Use-After-Free Vulnerability in Communication Module Affecting Availability

Publication date: 2026-04-13

Last updated on: 2026-04-15

Assigner: Huawei Technologies

Description

UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-13

Last Modified

2026-04-15

Generated

2026-07-06

AI Q&A

2026-04-13

EPSS Evaluated

2026-07-05

NVD

CVE-2026-34857

EUVD

EUVD-2026-21834

Affected Vendors & Products

Vendor	Product	Version / Range
huawei	harmonyos	5.1.0
huawei	harmonyos	6.0.0
huawei	harmonyos	5.1.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-362	The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Attack-Flow Graph

Executive Summary

This vulnerability is a Use-After-Free (UAF) issue found in the communication module. A UAF vulnerability occurs when a program continues to use memory after it has been freed, which can lead to unexpected behavior or crashes.

Impact Analysis

Successful exploitation of this vulnerability may affect the availability of the affected system or service.

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

The vulnerability affects Huawei HarmonyOS devices and may impact availability. Immediate mitigation steps include applying the April 2026 security update released by Huawei, which addresses this and other vulnerabilities in HarmonyOS-based devices.

Hi! I’m here to help you understand CVE-2026-34857. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70