CVE-2026-28540: Medium severity Huawei Harmonyos vulnerability
Published Mar 5, 2026
·Updated
Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Affected Software
2 affected components
Huawei Harmonyos=5.1.0
Huawei Harmonyos=6.0.0
Event History
Mar 5, 2026
CVE Published
via MITRE·07:55 AM
Data Sourced
via MITRE·07:55 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-28540?
CVE-2026-28540 is classified as a high severity vulnerability due to its potential impact on service confidentiality.
2
How do I fix CVE-2026-28540?
To fix CVE-2026-28540, users should update their Huawei HarmonyOS to the latest versions 5.1.0 or 6.0.0 with the security patches applied.
3
What does CVE-2026-28540 affect?
CVE-2026-28540 affects Bluetooth services in Huawei HarmonyOS versions 5.1.0 and 6.0.0.
4
What are the potential consequences of exploiting CVE-2026-28540?
Exploitation of CVE-2026-28540 could lead to unauthorized access to sensitive information, jeopardizing service confidentiality.
5
Is there a specific user action required for CVE-2026-28540?
Yes, users need to promptly update their devices to mitigate the risks associated with CVE-2026-28540.