The vulnerability lies in the window module of Huawei HarmonyOS, allowing an attacker to trigger a denial of service by causing the module to crash or halt, which can render the device inoperable. The flaw results from inappropriate handling of window creation or management calls, leading to resource exhaustion or instability. The impact is a loss of availability for affected devices, potentially interrupting user operations and chaining other attacks if privileged services restart incorrectly.

The flaw affects devices running Huawei HarmonyOS. Specific models include those covered in Huawei consumer bulletins for 2026‑10 across general, laptop, and wearable categories. No particular version number is listed in the advisory, so all HarmonyOS releases that contain the unpatched window module should be considered vulnerable.

The CVSS score of 7.5 indicates a high severity, while the EPSS score is not available, leaving exploitation probability unclear. The vulnerability is not found in the CISA KEV catalog, suggesting no known public exploits yet. The attack vector is not explicitly stated in the documentation; it is inferred that the attacker would need either local access or a privilege escalation that reaches the window subsystem to trigger the crash. Even in the absence of public exploitation evidence, the potential for service disruption warrants attention.