A use‑after‑free flaw has been identified in the location service module of Huawei HarmonyOS. When the service mistakenly accesses memory that has already been released, the operation can crash, leading to an interruption or suspension of location functionality. The defect can be triggered by normal usage of location features, thus an attacker could potentially force an outage of the service or the entire system if the crash propagates.

This vulnerability affects devices running Huawei HarmonyOS, including smartphones, laptops, vision and wearable products. No specific version ranges were supplied in the advisory, and all products listed under the HarmonyOS umbrella are considered at risk until a vendor patch is applied.

The CVSS score of 5.9 indicates moderate severity. No EPSS score is available, and the issue is not listed in CISA's KEV catalog. Based on the nature of a use‑after‑free flaw, the attack vector is inferred to be local or through normal application use of the location service. Successful exploitation would result in denial of service rather than broader confidentiality or integrity compromise.