CVE-2026-24919: Medium severity Huawei Emui vulnerability
Published Feb 6, 2026
·Updated
Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability.
Affected Software
8 affected components
Huawei Emui=12.0.0
Huawei Emui=14.0.0
Huawei Emui=14.2.0
Huawei Emui=15.0.0
Huawei Harmonyos=4.0.0
Huawei Harmonyos=4.2.0
Huawei Harmonyos=4.3.0
Huawei Harmonyos=4.3.1
Event History
Feb 6, 2026
CVE Published
via MITRE·08:53 AM
Data Sourced
via MITRE·08:53 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Feb 27, 58104
Event
via FIRST·10:12 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-24919?
CVE-2026-24919 is categorized with a medium severity rating due to its potential impact on availability.
2
How do I fix CVE-2026-24919?
To address CVE-2026-24919, it is recommended to update to the latest version of Huawei Emui or HarmonyOS that resolves this vulnerability.
3
What are the affected versions for CVE-2026-24919?
CVE-2026-24919 affects Huawei Emui versions 12.0.0, 14.0.0, 14.2.0, 15.0.0 and HarmonyOS versions 4.0.0, 4.2.0, 4.3.0, 4.3.1.
4
What type of vulnerability is CVE-2026-24919?
CVE-2026-24919 is an out-of-bounds write vulnerability in the DFX module.
5
Can CVE-2026-24919 be exploited remotely?
The vulnerability CVE-2026-24919 primarily affects the device's availability, but details on remote exploitation vary based on specific conditions.