CVE-2026-41961

Vulnerability

A permission control vulnerability exists in the contacts module of Huawei HarmonyOS and EMUI. The flaw is present in HarmonyOS versions 4.0.0, 4.2.0, 4.3.0, 4.3.1, 5.1.0, 6.0.0, 6.1.0 and EMUI versions 14.0.0, 14.2.0, 15.0.0, as listed in the May 2026 security bulletin [1]. Successful exploitation may affect availability.

Exploitation

The description indicates this is a permission control vulnerability in the contacts module [1]. An attacker would likely need local access to the device or the ability to trick a user into performing actions that bypass permission checks. Specific exploitation steps are not detailed in the available references.

Impact

Successful exploitation of this vulnerability may affect the availability of the device [1]. There is no indication of confidentiality or integrity compromise in the description.

Mitigation

Huawei has released security patches in the May 2026 security bulletin [1]. Users should update their devices to the latest firmware versions to mitigate this vulnerability. No workarounds are documented.