A race condition has been discovered in the location service module of Huawei HarmonyOS. The flaw can cause the service to fail or crash when concurrent operations conflict, leading to a denial of service. The vulnerability is described as a classic race condition (CWE‑362) and therefore does not grant integrity or confidentiality compromise, but it can affect the user experience and app stability.

The issue applies to all devices running Huawei HarmonyOS, including smartphones, laptops, and wearables. The specific versions affected are not listed in the advisory, so any device that has not yet applied the official update may be vulnerable.

The Cumulative Score Vector (CVSS) of 5.9 indicates a moderate impact and potential impact on availability. The Exploit Prediction Scoring System (EPSS) is not available, and the vulnerability is not listed on the CISA Known Exploited Vulnerabilities registry, suggesting no confirmed exploitation yet. The attack vector is inferred to be local or through the device’s own services, as the race condition occurs within the location service module. No additional prerequisites are indicated, but the flaw requires concurrency in the service’s processing.