A NULL pointer dereference in the Sensors_medical_sensor component of OpenHarmony can lead to a denial of service condition. The flaw is identified as CWE‑476 and allows a local attacker to trigger crashes or interrupts in the target device, effectively disrupting service availability. No information about remote exploitation or privileged escalation is provided, indicating that the vulnerability is limited in scope to local contexts.

This defect affects the OpenHarmony operating system, specifically all releases up to and including version 6.0. Users running these firmware versions, particularly in medical sensor environments, are directly impacted. No other products or vendors are listed.

The CVSS score of 3.3 reflects a low severity rating, and the EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog, suggesting that widespread exploitation is unlikely. However, because the attack vector is inferred to be local, an attacker with physical or restricted network access could repeatedly trigger service interruptions. The risk remains moderate in environments where local access is difficult to deny but low to high availability is critical.