Huawei LBS Perm Bypass (CVE-2026-34853)
CVE-2026-34853 Published on April 13, 2026
Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability.
Vulnerability Analysis
CVE-2026-34853 can be exploited with local system access, requires user interaction and user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
Privilege Context Switching Error
The software does not properly manage privileges while it is switching between different contexts that have different privileges or spheres of control.
Products Associated with CVE-2026-34853
stack.watch emails you whenever new vulnerabilities are published in Huawei Harmonyos or Huawei Emui. Just hit a watch button to start following.
Affected Versions
Huawei HarmonyOS:- Version 4.3.1 is affected.
- Version 4.3.0 is affected.
- Version 4.2.0 is affected.
- Version 4.0.0 is affected.
- Version 15.0.0 is affected.
- Version 14.2.0 is affected.
- Version 14.0.0 is affected.