CVE-2026-101179

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 59/100
Published: 2026-11-02 Modified: 2026-11-02 First seen: 2026-11-02 Status: active

Attack Surface

Network Low Complexity No Auth Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Required
S: Changed
C: Low
I: None
A: None

Description

Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
Huawei HarmonyOS 6.1.0
Huawei HarmonyOS 7.0.0
Huawei HarmonyOS 6.1.0
Huawei HarmonyOS 7.0.0

Bug Bounty Relevance

59 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity

CVSS Score

4.7 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

EPSS — Exploitation Probability

0.17%
Raw Score 0.001660
Percentile 5.9%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00166
2026-11-12
0.00166
2026-11-10
0.00166
2026-11-09
0.00166
2026-11-08
0.00166
2026-11-07
0.00166
2026-11-06
0.00166
2026-11-05
0.00166
2026-11-04
0.00166
2026-11-03
0.00166

Intelligence Sources

mitre ref →
nvd ref →