Based on the description, it is inferred that the vulnerability is an out‑of‑bounds write in the file system module that can corrupt files or overwrite memory. The impact is limited to data confidentiality and potential data integrity loss; an attacker who can supply crafted input could cause unintended data leakage or system corruption.

Huawei EMUI 14.2.0 and HarmonyOS 4.2.0 are affected by this vulnerability.

The CVSS score of 5.8 indicates a moderate risk. The EPSS score of less than 1% suggests that exploitation is unlikely but not impossible, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that exploitation would require delivering a malicious file or directory that the system processes, either locally or through a feature that accepts external inputs.