Huawei Emui

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Huawei Emui.

By the Year

In 2026 there have been 12 vulnerabilities in Huawei Emui with an average score of 6.3 out of ten. Last year, in 2025 Emui had 40 security vulnerabilities published. If vulnerabilities keep coming in at the current rate, it appears that number of security vulnerabilities in Emui in 2026 could surpass last years number. Last year, the average CVE base score was greater by 0.67

Year	Vulnerabilities	Average Score
2026	12	6.31
2025	40	6.98
2024	142	6.52
2023	224	7.43
2022	237	7.56
2021	140	7.65

It may take a day or so for new Emui vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Huawei Emui Security Vulnerabilities

Huawei HarmonyOS SysService Framework Permission Bypass
CVE-2026-28542 7.3 - High - March 05, 2026

Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability.

Improper Handling of Exceptional Conditions

Huawei Email App Improper Verification may Expose Service Confidential
CVE-2026-28548 7.1 - High - March 05, 2026

Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Improper Privilege Management

Huawei IMS Module OOB Write Availability Impact
CVE-2026-28552 6.5 - Medium - March 05, 2026

Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability.

Data Processing Errors

OOB Write in File System Module CVE-2026-24928
CVE-2026-24928 5.8 - Medium - February 06, 2026

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Integer Overflow to Buffer Overflow

CVE-2026-24927: OOB Access in FM Mod Module Availability Risk
CVE-2026-24927 5.5 - Medium - February 06, 2026

Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability.

Dangling pointer

Permission Control Vulnerability in AMS Module
CVE-2026-24920 6.2 - Medium - February 06, 2026

Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability.

Permissions, Privileges, and Access Controls

DFX Module OOB Write Vulnerability
CVE-2026-24919 6 - Medium - February 06, 2026

Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability.

Memory Corruption

UAF in Security Module via CVE-2026-24917
CVE-2026-24917 6.5 - Medium - February 06, 2026

UAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may affect availability.

Dangling pointer

AR CVE-2026-24918: Address Read Vulnerability in Comm Module
CVE-2026-24918 6.8 - Medium - February 06, 2026

Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

NULL Pointer Dereference

Huawei MediaLib: Permission Bypass in Media Library Module
CVE-2025-68959 6.2 - Medium - January 14, 2026

Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Information Disclosure

Huawei Media Library Module Permission Bypass (CVE-2025-68970)
CVE-2025-68970 6.1 - Medium - January 14, 2026

Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Improper Input Validation

MI-M Attack on Huawei Clone Module
CVE-2025-68963 5.7 - Medium - January 14, 2026

Man-in-the-middle attack vulnerability in the Clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Weak Password Requirements

Window Management Module Permission Control Vulnerability (CVE-2025-66329)
CVE-2025-66329 4 - Medium - December 08, 2025

Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability.

Permissions, Privileges, and Access Controls

Permission Control Vulnerability in Package Manager
CVE-2025-66325 6.2 - Medium - December 08, 2025

Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Permissions, Privileges, and Access Controls

USB Driver Module UAF Vulnerability
CVE-2025-58311 5.8 - Medium - November 28, 2025

UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

Dangling pointer

CVE-2025-58302: Settings Module Permission Control Vulnerability
CVE-2025-58302 8.4 - High - November 28, 2025

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Permissions, Privileges, and Access Controls

Component Driver Module Invalid Memory Access (CVE-2025-58314)
CVE-2025-58314 6.6 - Medium - November 28, 2025

Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

Out-of-bounds Read

BLE Module DoS via packet length validation flaw
CVE-2025-54646 4.3 - Medium - August 06, 2025

Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance.

Linux Kernel Buffer Overflow in Accel Module – DoS
CVE-2025-54641 5.5 - Medium - August 06, 2025

Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability.

Classic Buffer Overflow

Linux Kernel Gyroscope Driver Buffer Overflow (CVE-2025-54642)
CVE-2025-54642 5.5 - Medium - August 06, 2025

Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may affect availability.

Classic Buffer Overflow

Kernel Drop Detection Module Buffer Overflow (CVE-2025-54636)
CVE-2025-54636 5.5 - Medium - August 06, 2025

Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability.

OOB Array Access in Linux kernel ambient light module
CVE-2025-54637 5.5 - Medium - August 06, 2025

Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Referrer-based Resource Read Vulnerability in Gallery Module (CVE-2025-54611)
CVE-2025-54611 5.5 - Medium - August 06, 2025

EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2025-53177: Permission Bypass in Calendar Storage Module (Watch Sync)
CVE-2025-53177 - July 07, 2025

Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.

Permission Bypass in Calendar Storage Module of Car Head Units
CVE-2025-53178 - July 07, 2025

Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.

Virtual Address Reuse LPE in Linux Kernel
CVE-2025-53185 5.5 - Medium - July 07, 2025

Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity.

Android Audio Framework: Unverified Broadcasts by 3rd-Party Call Apps
CVE-2025-53186 6.2 - Medium - July 07, 2025

Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.

Uncontrolled System Resource Leak in Settings Module (CVE-2025-48902)
CVE-2025-48902 - June 06, 2025

Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability.