CVE-2026-24919

CWE-787 — Out-of-bounds Write3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 99.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei EmuiHuawei Harmonyos
Timeline
PublishedFeb 6

Description

Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:HExploitability: 0.8 | Impact: 5.2

Affected Packages4 packages

▶CVEListV5huawei/emui14.0.0, 14.2.0, 15.0.0+2
▶NVDhuawei/emui4 versions+3
▶CVEListV5huawei/harmonyos4 versions+3
▶NVDhuawei/harmonyos4 versions+3

🔴Vulnerability Details

2
CVEList
CVE-2026-24919: Out-of-bounds write vulnerability in the DFX module↗2026-02-06
▶
GHSA
GHSA-7jh2-pr8p-wcv7: Out-of-bounds write vulnerability in the DFX module↗2026-02-06
▶
CVE-2026-24919 (MEDIUM CVSS 5.5) | Out-of-bounds write vulnerability i | cvebase.io