CVE-2026-41982

MediumCVSS 6.4/10Last modified Jul 23, 2026

Description

Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
HuaweiHarmonyOS6.1.0; 6.0.0; 5.1.0

References

Timeline

Published
Jun 9, 2026
Last modified
Jul 23, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-419834.3Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419845.2UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.CVE-2026-419855.1UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.CVE-2026-419862.4Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419876.2Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availabilityCVE-2026-419882.5uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUIDCVE-2026-419896.7Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.CVE-2026-41995.3A vulnerability was identified in bazinga012 mcp_code_executor up to 0.3.0. Affected by this issue is the function installDependencies of thCVE-2026-419904.0Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.CVE-2026-419914.7GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not availableCVE-2026-419927.5GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state betwCVE-2026-419934.4Improper Access Control vulnerability in the Removable Media Validation function of TXOne Networks products allows a local attacker with adm
CVE-2026-41982: Medium severity, CVSS 6.4 | Vulnix