The vulnerability is an out‑of‑bounds write in the camera module of Huawei HarmonyOS. Writing beyond the allocated buffer can corrupt adjacent memory, potentially causing the system to crash or behave unpredictably. The stated primary impact is availability, meaning the system may become unusable or require a reboot. No direct data disclosure or execution path is described, so the threat is limited to disruption rather than data compromise or code execution.

The affected platform is Huawei HarmonyOS, specifically version 6.0.0 as identified by the CNA notes and the CPE string.

The flaw receives a CVSS score of 8.4, indicating a high severity. The EPSS score is less than 1 %, pointing to a low probability of exploitation in the current market, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is not explicitly detailed in the advisory; the flaw resides in the camera module, which could be accessed by local applications or system services that request camera use. Based on CVSS attributes, exploitation likely requires either local or at least privileged access to the device.