CVE-2026-49301

Summary

Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Affected Software

VendorProductVersion RangeStatus
HuaweiHarmonyOS4.3.1affected
HuaweiHarmonyOS4.3.0affected
HuaweiHarmonyOS4.2.0affected
HuaweiHarmonyOS4.0.0affected
HuaweiEMUI15.0.0affected
HuaweiEMUI14.2.0affected
HuaweiEMUI14.0.0affected

Weaknesses

  • CWE-200: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References