CVE-2026-24918: Null Pointer Dereference
Published Feb 6, 2026
·Updated
Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.
Affected Software
5 affected components
Huawei Emui=15.0.0
Huawei Harmonyos=4.3.1
Huawei Harmonyos=5.1.0
Huawei Harmonyos=5.1.1
Huawei Harmonyos=6.0.0
Event History
Feb 6, 2026
CVE Published
via MITRE·08:29 AM
Data Sourced
via MITRE·08:29 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-24918?
CVE-2026-24918 is rated as a medium severity vulnerability affecting availability due to an address read issue.
2
How do I fix CVE-2026-24918?
To fix CVE-2026-24918, update affected Huawei devices to the latest firmware version provided by the manufacturer.
3
Which devices are affected by CVE-2026-24918?
CVE-2026-24918 affects Huawei devices running specific versions of Emui and HarmonyOS, including versions 15.0.0, 4.3.1, 5.1.0, 5.1.1, and 6.0.0.
4
What impact does CVE-2026-24918 have?
The impact of CVE-2026-24918 includes potential availability issues that could disrupt normal device operation.
5
Is there a workaround for CVE-2026-24918?
Currently, the best approach for CVE-2026-24918 is to apply the recommended updates as a workaround.