The vulnerability is a heap‑based buffer overflow in the image module of Huawei HarmonyOS. When malformed image data is processed, the corruption can overwrite adjacent memory, potentially causing the image handling service to crash and denying service availability. No direct compromise of confidentiality or integrity is reported in the official description.

Huawei HarmonyOS versions 5.1.0 and 6.0.0 are affected by the heap overflow in the image module. These versions of the operating system include the vulnerable component that processes image files.

The CVSS score of 7.3 indicates a high severity, while the EPSS score of less than 1% suggests that current exploitation attempts are extremely rare. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. The attack vector is not explicitly stated, but it is inferred that delivering a specially crafted image—either locally or over a network interface that accepts image input—could trigger the overflow. No exploit code is documented, so the likelihood of public exploitation remains low at present.