CVE-2026-28540

LOW EPSS 0.3%
Published Mar 5, 20263mo ago · Modified Jun 17, 20262w ago
3.3 CVSS 3.1
Low
Find Similar
Published Mar 5, 2026 3mo ago
Last Modified Jun 17, 2026 2w ago

Description

Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS Details

Base Score
3.3
Exploitability
1.8
Impact
1.4
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
0.3% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 2

CWE-125 Out-of-bounds Read Memory Safety
CWE-158

Affected Products 2

VendorProductVersionRange
huaweiharmonyos5.1.0any
huaweiharmonyos6.0.0any

References 4

  • consumer.huawei.com https://consumer.huawei.com/en/support/bulletin/2026/3/
    Vendor Advisory
  • consumer.huawei.com https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/
    Vendor Advisory
  • consumer.huawei.com https://consumer.huawei.com/en/support/bulletinvision/2026/3/
    Vendor Advisory
  • consumer.huawei.com https://consumer.huawei.com/en/support/bulletinwearables/2026/3/
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.