The vulnerability resides in Huawei HarmonyOS’s DSoftBus module. It represents a resource exhaustion flaw that, when successfully exploited, can cause a denial of service and downgrade the device’s availability to its users. No additional privileges are required for the attacker, and the impact is limited to disrupting service rather than compromising confidentiality or integrity.

Affected systems are Huawei HarmonyOS devices that include the DSoftBus module. The affected version range is not specified in the advisory, so all HarmonyOS releases that ship with the DSoftBus component should be considered potentially vulnerable.

The CVSS score of 5.7 indicates a medium severity. The EPSS score is not provided, and the vulnerability is not listed in the CISA KEV catalog, suggesting no publicly known exploits yet. The likely attack vector is through the DSoftBus communication channel, which could be accessed over local or network interfaces, but the exact conditions are not detailed in the source. Attackers would aim to trigger the resource exhaustion to interrupt normal operation, making the vulnerability useful for attackers seeking to degrade availability.