The vulnerability is a use‑after‑free caused by a race condition in HarmonyOS' graphics subsystem. When concurrent requests process shared graphics resources, an attacker can trigger a memory misuse that leads to a crash. The consequence is loss of service for the affected device or application, as the graphics module terminates unexpectedly. This results in an availability loss rather than confidentiality or integrity breaches.

Huawei HarmonyOS versions 5.1.0 and 6.0.0 are affected, as indicated by the vendor's advisory and the specified CPE entries. All devices running these operating system releases, including consumer smartphones and laptops, may be vulnerable.

The CVSS base score of 8.4 classifies the flaw as high severity. The EPSS rating of less than 1% suggests a low likelihood of exploitation in the wild at present, and the vulnerability is not listed in CISA's KEV catalog. Because the description does not specify the required privileges or remote interaction, the most reasonable assumption is that an attacker could exercise the flaw by supplying malicious graphics data that the OS will process, such as an image file or media stream; thus the vector is likely local or remote through content ingestion. Regardless, a successful exploit would cause a denial of service that could affect a single user or the broader system depending on how the graphics module is integrated.