CVE-2026-49314

Deferred Deferred - Pending Action

OOB Write in Huawei Product Affecting Availability

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Huawei Technologies

Description

OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-49314

EUVD

EUVD-2026-74596

Affected Vendors & Products

Vendor	Product	Version / Range
huawei	harmonyos	From 6.1.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

CVE-2026-49314 is an out-of-bounds (OOB) write vulnerability in the rendering and composition module of Huawei HarmonyOS. This means an attacker could write data outside the intended memory buffer, potentially causing system instability or crashes.

Impact Analysis

Successful exploitation may affect system availability, leading to crashes or reduced performance. The vulnerability has a CVSS v3.1 score of 7.3, indicating high impact on confidentiality and moderate impact on integrity and availability.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with standards like GDPR or HIPAA. The vulnerability primarily affects system availability and may lead to unauthorized access or data exposure, which could indirectly impact compliance if sensitive data is involved.

Mitigation Strategies

Update HarmonyOS to the latest version as soon as patches are available. Avoid installing untrusted applications. Monitor system performance for unusual behavior. Disable unnecessary services that may interact with the rendering and composition module.

Hi! I’m here to help you understand CVE-2026-49314. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70