Huawei HarmonyOS June 2026 Security Bulletin: Multiple CVEs (UAF, OOB Write, Race Condition)

Vulnerability Overview Huawei released the June 2026 security update, which includes patches for Huawei and third-party libraries. The specific vulnerability details are as follows: Huawei Patches 1. CVE-2026-41981 - Vulnerability Description: Out-of-bounds write vulnerability in the IPC module - Impact: Successful exploitation of this vulnerability may affect availability - Severity: Medium - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0, HarmonyOS 5.1.0 2. CVE-2026-41982 - Vulnerability Description: Race condition vulnerability in the IPC module - Impact: Successful exploitation of this vulnerability may affect availability - Severity: Medium - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0, HarmonyOS 5.1.0 3. CVE-2026-41983 - Vulnerability Description: DoS vulnerability in the browser engine - Impact: Successful exploitation of this vulnerability may affect availability - Severity: Medium - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 4. CVE-2026-41984 - Vulnerability Description: Use-After-Free (UAF) vulnerability - Impact: Successful exploitation of this vulnerability may affect service integrity - Severity: Medium - Affected Versions: HarmonyOS 6.1.0 5. CVE-2026-41985 - Vulnerability Description: Use-After-Free (UAF) vulnerability in the package management module - Impact: Successful exploitation of this vulnerability may affect service integrity - Severity: Medium - Affected Versions: HarmonyOS 6.1.0 Third-Party Library Patches 1. CVE-2025-57052 - Severity: Critical - Affected Versions: HarmonyOS 5.1.0 2. CVE-2026-31789 - Severity: Critical - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0, HarmonyOS 5.1.0 3. CVE-2026-6314 - Severity: High - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 4. CVE-2026-28387 - Severity: High - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0, HarmonyOS 5.1.0 5. CVE-2026-28388 - Severity: High - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0, HarmonyOS 5.1.0 6. CVE-2026-28389 - Severity: High - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0, HarmonyOS 5.1.0 7. CVE-2026-28390 - Severity: High - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0, HarmonyOS 5.1.0 8. CVE-2026-31790 - Severity: High - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0, HarmonyOS 5.1.0 Impact Scope Huawei Patches: Affects HarmonyOS 6.1.0, HarmonyOS 6.0.0, and HarmonyOS 5.1.0 versions. Third-Party Library Patches: Affects HarmonyOS 6.1.0, HarmonyOS 6.0.0, and HarmonyOS 5.1.0 versions. Remediation Huawei Patches: Huawei has released the corresponding security updates. Users are advised to update their systems promptly to fix the aforementioned vulnerabilities. Third-Party Library Patches: Huawei has released the corresponding security updates. Users are advised to update their systems promptly to fix the aforementioned vulnerabilities. POC Code or Exploitation Code No POC code or exploitation code is included in this page.

Goal Reached Thanks to every supporter — we hit 100%!

Huawei HarmonyOS June 2026 Security Bulletin: Multiple CVEs (UAF, OOB Write, Race Condition)