Technical impact
A race condition exists in the printing module of Huawei HarmonyOS, allowing an attacker who can trigger concurrent access to the print spooler to destabilize the service. Successful exploitation may cause the printing component to become unresponsive, leading to denial of availability for users relying on printing functions. This vulnerability is classified under CWE-362, indicating a flaw in concurrent resource handling.
Affected Systems
Huawei HarmonyOS 6.0.0 is affected. The issue impacts all devices running HarmonyOS 6.0.0.
Risk and Exploitability
The CVSS score of 5.9 reflects a moderate risk level. The EPSS score of less than 1% denotes a very low exploitation probability at the time of this analysis. The vulnerability is not present in the CISA KEV catalog, suggesting no known widespread exploitation yet. Attackers would likely need local access to the printing subsystem or privileged user context to trigger the race condition, making the attack vector more restrictive than remote exploitation.
