CVE-2026-24920 PUBLISHED

Assigner: huawei
Reserved: 28.01.2026 Published: 06.02.2026 Updated: 06.02.2026

Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS Score: 6.2

Product Status

Vendor Huawei
Product HarmonyOS
Versions Default: unaffected
  • Version 4.3.1 is affected
  • Version 4.3.0 is affected
  • Version 4.2.0 is affected
Vendor Huawei
Product EMUI
Versions Default: unaffected
  • Version 15.0.0 is affected
  • Version 14.2.0 is affected

References

Problem Types

  • CWE-264 Permissions, Privileges, and Access Controls CWE