The vulnerability is a double free in the window module of Huawei HarmonyOS. This coding error may lead to memory corruption and potentially cause the window service to crash, thereby denying service to users. The flaw is classified as CWE-415, indicating a memory management issue, and no evidence suggests it results in code execution or data exposure.

Affected vendor and product is Huawei HarmonyOS, specifically version 6.0.0 as indicated by the CPE string. No other versions are listed as affected.

The CVSS score of 5.1 reflects moderate severity, and an EPSS score of less than 1% indicates a low probability of exploitation. The vulnerability is not present in CISA's Known Exploited Vulnerabilities catalog. The attack vector is not explicitly provided in the CVE data; based on the nature of a double free, it is inferred that exploitation would require interaction with the window module, perhaps through a local user or privileged process, and would mainly result in a crash that disrupts availability.