CVE-2026-41970
published 2026-05-15CVE-2026-41970: Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability.
PriorityP430medium6.8CVSS 3.1
AVAACLPRLUINSUCLILAH
EPSS
0.13%
3.1th percentile
Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| huawei | emui | — | — |
| huawei | emui | — | — |
| huawei | emui | — | — |
| huawei | emui | — | — |
| huawei | harmonyos | — | — |
| huawei | harmonyos | — | — |
| huawei | harmonyos | — | — |
| huawei | harmonyos | — | — |
| huawei | harmonyos | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-37mq-vvr9-ppr8: Out-of-bounds write vulnerability in the distributed file system module
ghsa_unreviewed·2026-05-15
CVE-2026-41970 [MEDIUM] CWE-787 GHSA-37mq-vvr9-ppr8: Out-of-bounds write vulnerability in the distributed file system module
Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability.
VulDB
Huawei HarmonyOS/EMUI Distributed File System out-of-bounds write (EUVD-2026-30534)
vuldb·2026-05-15·CVSS 6.8
CVE-2026-41970 [MEDIUM] Huawei HarmonyOS/EMUI Distributed File System out-of-bounds write (EUVD-2026-30534)
A vulnerability, which was classified as critical, has been found in Huawei HarmonyOS and EMUI. This vulnerability affects unknown code of the component Distributed File System Module. The manipulation leads to out-of-bounds write.
This vulnerability is traded as CVE-2026-41970. Access to the local network is required for this attack to succeed. There is no exploit available.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-05-15
Published