An out‑of‑bounds write flaw in the kernel LiteOS‑a component of OpenHarmony enables a local attacker to crash the system. Because the vulnerability causes a denial of service that cannot be recovered without a reboot, it directly impacts system availability. The weakness corresponds to CWE‑787, which is an out‑of‑bounds write vulnerability.

The advisory lists OpenHarmony (OpenHarmony) as the affected vendor. All releases based on kernel LiteOS‑a up to and including version 6.0 are vulnerable. No additional product or version scope is supplied by the CNA.

The CVSS base score of 8.4 rates the vulnerability as high severity and the EPSS score is not provided, meaning the likelihood of exploitation is currently unknown. The vulnerability is not listed in the CISA KEV catalog, indicating no confirmed widespread exploitation to date. Because the flaw can only be triggered from a local context, a local user or process with sufficient permissions is required. Successful exploitation will likely result in an unrecoverable system crash, necessitating a reboot and potentially causing downtime for any services running on the impacted device.