CVE-2026-24931: Medium severity Huawei Harmonyos vulnerability
Published Feb 6, 2026
·Updated
Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Affected Software
2 affected components
Huawei Harmonyos=5.1.0
Huawei Harmonyos=6.0.0
Event History
Feb 6, 2026
CVE Published
via MITRE·08:46 AM
Data Sourced
via MITRE·08:46 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-24931?
The severity of CVE-2026-24931 is medium, indicating a potential risk to service confidentiality.
2
How do I fix CVE-2026-24931?
To fix CVE-2026-24931, users should update their Huawei HarmonyOS devices to the latest available version that addresses the vulnerability.
3
What components are affected by CVE-2026-24931?
CVE-2026-24931 specifically affects the card module in Huawei HarmonyOS versions 5.1.0 and 6.0.0.
4
Can CVE-2026-24931 be exploited remotely?
Yes, CVE-2026-24931 can potentially be exploited remotely, posing a risk to service confidentiality.
5
What should I do if I am using an affected version of HarmonyOS?
If you are using an affected version of HarmonyOS, it is important to apply the security updates provided by Huawei immediately.