Technical impact
The vulnerability is a type confusion flaw in HarmonyOS’s camera module, which can cause incorrect type handling and lead to crashes that disrupt device operation. When successfully triggered, this flaw may expose the device to temporary or permanent service interruption, affecting users who rely on camera functionality for daily tasks or critical applications. The weakness corresponds to CWE-416 (Use After Free) and CWE-843 (Improper Type Conversion).
Affected Systems
The affected system is Huawei HarmonyOS version 6.0.0, as listed in the Common Platform Enumeration string. No other versions or products are mentioned, so the impact is confined to devices running this specific HarmonyOS release.
Risk and Exploitability
The score reflects moderate severity (CVSS 4.0) and very low exploitation probability (<1% EPSS). The vulnerability is not cataloged in the CISA KEV list. Based on the description, the attack vector is inferred to be local, likely requiring the user or a local application with camera access to trigger the type confusion. No remote exploitation path is documented, so defenders should focus on local threat mitigation.
