A vulnerability in Huawei’s communication module allows an attacker to read memory addresses, which could lead to a breakdown of the system’s availability. The flaw may enable a user or malicious actor to cause a denial of service by disrupting normal operation of the affected OS.

Huawei Emui 15.0.0, Huawei HarmonyOS 4.3.1, 5.1.0, 5.1.1, and 6.0.0 are all impacted, as identified by the vendor’s support bulletins for consumer devices, laptops, vision hardware, and wearables.

The CVSS score of 6.8 indicates moderate severity, while the EPSS score of less than 1% suggests a very low probability that the vulnerability will be actively exploited. The flaw is not listed in the CISA KEV catalog. Based on the description, the attack vector is inferred to be related to the communication module, potentially allowing local or remote exploitation through network traffic or privileged processes. No specific exploitation method is detailed in the advisory, and no workaround is currently provided by the vendor.