HarmonyOS CVE-2026-41979

Exploitation requires local access to the HarmonyOS device and mandated user interaction (UI:R per CVSS vector) - the attack cannot be triggered remotely or silently without some user-initiated action within the print module. No privileges are required prior to exploitation (PR:N), meaning any local user account, including low-privileged ones, could be the vehicle. The specific triggering interaction (e.g., initiating a print job, modifying print settings) is not precisely defined in available data. Exploitation is limited to integrity impact only - confidentiality is not affected per CVSS (C:N), despite the 'Information Disclosure' tag in source metadata, which is unresolved. Remote exploitation is not possible given the local attack vector (AV:L). Scope is unchanged (S:U), meaning the attacker cannot pivot to components outside the print module's security domain via this flaw alone.

The CVSS score of 5.5 (Medium) reflects a constrained attack surface: local access (AV:L) and mandatory user interaction (UI:R) significantly limit opportunistic exploitation. However, the high integrity impact (I:H) means a successful attack can tamper with data or system state in a meaningful way, which in a mobile OS context could affect print job content, configuration files, or module permissions. EPSS data was not provided, making probabilistic exploitation likelihood assessment unavailable. The vulnerability is not listed in the CISA KEV catalog and no public POC has been identified, indicating no confirmed active exploitation at this time. The CPE wildcard ('*') suggests all HarmonyOS versions may be affected, but no version boundaries are confirmed from available data. The 'Information Disclosure' tag in source intelligence conflicts with the CVSS vector (C:N), creating an unresolved data inconsistency - defenders should consult the Huawei bulletin directly to confirm the true confidentiality impact. Overall, this is a medium-priority vulnerability; not an immediate emergency but should be patched in enterprise or sensitive HarmonyOS deployments where print module integrity matters.

A local user on a HarmonyOS device, without needing any elevated account privileges, triggers a specific interaction with the print module - such as initiating a print job or configuring print settings - which causes the module to apply permissions incorrectly. The attacker leverages this flaw to write to or modify data or configuration that should be protected, compromising system integrity. No public exploit code exists at time of analysis, so exploitation would require independent rediscovery of the flaw.