Security Bulletins for HUAWEI PCs, February 2026
HUAWEI is releasing monthly security updates for flagship models. This security update includes HUAWEI and third-party library patches:
This security update includes the following HUAWEI patches:
| CVE | Vulnerability Description | Impact | Severity | Affected Version |
|---|---|---|---|---|
| CVE-2026-24925 | Heap-based buffer overflow vulnerability in the image module | Successful exploitation of this vulnerability may affect availability. | High | HarmonyOS6.0.0 |
| CVE-2026-24926 | Out-of-bounds write vulnerability in the camera module | Successful exploitation of this vulnerability may affect availability. | High | HarmonyOS6.0.0 |
| CVE-2026-24914 | Type confusion vulnerability in the camera module | Successful exploitation of this vulnerability may affect availability. | Medium | HarmonyOS6.0.0 |
| CVE-2026-24915 | Out-of-bounds read issue in the media subsystem | Successful exploitation of this vulnerability will affect availability and confidentiality. | Medium | HarmonyOS6.0.0 |
| CVE-2026-24918 | Address read vulnerability in the communication module | Successful exploitation of this vulnerability may affect availability. | Medium | HarmonyOS6.0.0 |
| CVE-2026-24921 | Address read vulnerability in the HDC module | Successful exploitation of this vulnerability will affect availability and confidentiality. | Medium | HarmonyOS6.0.0 |
| CVE-2026-24922 | Buffer overflow vulnerability in the HDC module | Successful exploitation of this vulnerability may affect availability. | Medium | HarmonyOS6.0.0 |
| CVE-2026-24923 | Permission control vulnerability in the HDC module | Successful exploitation of this vulnerability may affect service confidentiality. | Medium | HarmonyOS6.0.0 |
| CVE-2026-24929 | Out-of-bounds read vulnerability in the graphics module | Successful exploitation of this vulnerability may affect availability. | Medium | HarmonyOS6.0.0 |
| CVE-2026-24930 | UAF concurrency vulnerability in the graphics module | Successful exploitation of this vulnerability may affect availability. | Medium | HarmonyOS6.0.0 |
| CVE-2026-24931 | Vulnerability of improper criterion security check in the card module | Successful exploitation of this vulnerability may affect service confidentiality. | Medium | HarmonyOS6.0.0 |
This security update includes the following third-party library patches:
| CVE | Severity | Affected Version |
|---|---|---|
| CVE-2025-39683 | High | HarmonyOS6.0.0 |
| CVE-2025-38732 | Medium | HarmonyOS6.0.0 |
| CVE-2023-53450 | Medium | HarmonyOS6.0.0 |
| CVE-2025-40173 | Medium | HarmonyOS6.0.0 |
Updated on: 2026-02-05