Skip to main content

HarmonyOS Bluetooth CVE-2026-58556

| EUVDEUVD-2026-44663 MEDIUM
Permissions, Privileges, and Access Controls (CWE-264)
2026-07-15 huawei GHSA-vc9f-285p-f5rf
Privilege Escalation Emui Huawei Harmony Os
5.1
CVSS 3.1 · Vendor: huawei
Share

Severity by source

Vendor (huawei) PRIMARY
5.1 MEDIUM
AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
vuln.today AI
5.1 MEDIUM

Local-only access required with no prior privileges; limited confidentiality leak and availability disruption without integrity impact, consistent with Bluetooth permission bypass description.

3.1 AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
4.0 AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (huawei).

CVSS VectorVendor: huawei

Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
Low

Lifecycle Timeline

1
Analysis Generated
Jul 15, 2026 - 13:22 vuln.today

DescriptionCVE.org

Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.

AnalysisAI

Permission control failure in the Bluetooth module of Huawei HarmonyOS and EMUI exposes devices to local exploitation that can degrade Bluetooth service availability and leak limited data. The flaw, classified under CWE-264, allows a local process operating without elevated privileges to bypass Bluetooth permission enforcement, potentially disrupting connectivity or reading restricted information. No public exploit or CISA KEV listing exists at time of analysis, but Huawei has disclosed this via its July 2026 security bulletin.

Technical ContextAI

The vulnerability resides in the Bluetooth stack component of Huawei's HarmonyOS and EMUI operating systems, as identified by CPE entries cpe:2.3:a:huawei:harmony_os:*:*:*:*:*:*:*:* and cpe:2.3:a:huawei:emui:*:*:*:*:*:*:*:*. CWE-264 (Permissions, Privileges, and Access Controls) indicates that the Bluetooth module fails to properly enforce access control checks, allowing a caller without the requisite Bluetooth permissions to interact with restricted functionality. This class of flaw typically arises from missing or incorrectly ordered permission gate calls in IPC/binder interfaces, system service APIs, or broadcast receivers within the Bluetooth subsystem. The local attack vector confirms exploitation requires code execution on the device rather than a remote network path.

RemediationAI

Apply the security update referenced in Huawei's July 2026 security bulletin at https://consumer.huawei.com/en/support/bulletin/2026/7/; the exact patched HarmonyOS and EMUI version numbers are not specified in the available data and must be confirmed against the bulletin directly. On devices where OTA updates cannot be immediately applied, a compensating control is to disable Bluetooth entirely via device settings when not in active use, which removes the attack surface at the cost of Bluetooth connectivity. Restricting installation of untrusted or sideloaded applications reduces the local attacker footprint, since exploitation requires malicious code already running on the device. Enterprise MDM policies enforcing mandatory OS update compliance are the most reliable mitigation at scale.

More in Emui

View all
CVE-2024-32991 CRITICAL
9.8 May 14

Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability
CVE-2023-46773 CRITICAL
9.8 Dec 06

Permission management vulnerability in the PMS module. Rated critical severity (CVSS 9.8), this vulnerability is remotel
CVE-2023-44116 CRITICAL
9.8 Oct 11

Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this

CVE-2023-44105 CRITICAL
9.8 Oct 11

Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this
CVE-2023-44106 CRITICAL
9.8 Oct 11

API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may caus
CVE-2023-41297 CRITICAL
9.8 Sep 25

Vulnerability of defects introduced in the design process in the HiviewTunner module. Rated critical severity (CVSS 9.8)
CVE-2023-39405 CRITICAL
9.8 Aug 13

Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Rated critical severity (CVSS 9.8), this vulner
CVE-2023-37242 CRITICAL
9.8 Jul 06

Vulnerability of commands from the modem being intercepted in the atcmdserver module. Rated critical severity (CVSS 9.8)
CVE-2023-34159 CRITICAL
9.8 Jun 19

Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to pr
CVE-2022-46327 CRITICAL
9.8 Dec 20

Some smartphones have configuration issues. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitab
CVE-2022-46326 CRITICAL
9.8 Dec 20

Some smartphones have the out-of-bounds write vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is r
CVE-2022-46325 CRITICAL
9.8 Dec 20

Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause syst

Same weakness CWE-264 – Permissions, Privileges, and Access Controls

View all
CVE-2013-0422 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0
CVE-2015-7709 CRITICAL POC
10.0
CVE-2014-0514 CRITICAL POC
9.3
CVE-2013-6955 CRITICAL POC
10.0
CVE-2012-0299 CRITICAL POC
10.0

Same technique Privilege Escalation

View all
CVE-2024-0012 CRITICAL POC
9.3
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2024-9474 MEDIUM POC
6.9
CVE-2017-5689 CRITICAL POC
9.8
CVE-2021-20021 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8

Share

CVE-2026-58556 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy