Security Bulletins for HUAWEI Phones/Tablets, September 2026
HUAWEI is releasing monthly security updates for flagship models. This security update includes HUAWEI and third-party library patches:
This security update includes the following HUAWEI patches:
| CVE | Vulnerability Description | Impact | Severity | Affected Version |
|---|---|---|---|---|
| CVE-2026-49311 | Permission control vulnerability in the event notification module | Successful exploitation of this vulnerability may affect availability. | High | HarmonyOS6.1.0 |
| CVE-2026-49314 | OOB write vulnerability in the rendering and composition module | Successful exploitation of this vulnerability may affect availability. | High | HarmonyOS6.1.0 |
| CVE-2026-49315 | DoS vulnerability in the input device module | Successful exploitation of this vulnerability may affect availability. | High | HarmonyOS4.3.3, HarmonyOS4.3.1, HarmonyOS4.3.0, HarmonyOS4.2.0, HarmonyOS4.0.0, EMUI 16.0.0, EMUI 15.0.0, EMUI 14.2.0, EMUI 14.0.0 |
| CVE-2026-41987 | Permission control vulnerability in the app management module | Successful exploitation of this vulnerability may affect availability. | Medium | HarmonyOS4.3.3, HarmonyOS4.3.1, HarmonyOS4.3.0, HarmonyOS4.2.0, HarmonyOS4.0.0, EMUI 16.0.0, EMUI 15.0.0, EMUI 14.2.0, EMUI 14.0.0 |
| CVE-2026-49309 | Permission control vulnerability in the Settings module | Successful exploitation of this vulnerability may affect service confidentiality. | Medium | HarmonyOS4.3.3, HarmonyOS4.3.1, HarmonyOS4.3.0, HarmonyOS4.2.0, HarmonyOS4.0.0, EMUI 16.0.0, EMUI 15.0.0, EMUI 14.2.0, EMUI 14.0.0 |
| CVE-2026-49310 | Permission control vulnerability in the event notification module | Successful exploitation of this vulnerability may affect service confidentiality. | Medium | HarmonyOS6.1.0 |
| CVE-2026-49312 | Permission control vulnerability in the window module | Successful exploitation of this vulnerability may affect service confidentiality. | Medium | HarmonyOS6.1.0 |
| CVE-2026-49313 | Permission control vulnerability in the app lock module | Successful exploitation of this vulnerability may affect service confidentiality. | Medium | HarmonyOS6.1.0 |
| CVE-2026-81644 | DoS vulnerability in the preview service module | Successful exploitation of this vulnerability may affect availability. | Medium | HarmonyOS6.1.0 |
| CVE-2026-81645 | Out-of-bounds read vulnerability in the graphics module | Successful exploitation of this vulnerability may affect availability. | Medium | HarmonyOS6.1.0 |
| CVE-2026-81646 | ||||
| CVE-2026-81647 |
This security update includes the following third-party library patches:
| CVE | Severity | Affected Version |
|---|---|---|
| CVE-2025-32348 | High | HarmonyOS4.3.3, HarmonyOS4.3.1, HarmonyOS4.3.0, HarmonyOS4.2.0, HarmonyOS4.0.0, EMUI 16.0.0, EMUI 15.0.0, EMUI 14.2.0, EMUI 14.0.0 |
| CVE-2026-68965 | Low | HarmonyOS6.1.0 |
Updated on: 2026-09-05