A buffer overflow has been identified in the HarmonyOS scanning module. This fault can allow an attacker to corrupt memory during a scanning operation, potentially causing the scanner, and in the worst case the entire system, to crash or become unresponsive. The weakness aligns with CWE‑122 and is limited to a loss of availability rather than code execution or data compromise.

The vulnerability affects Huawei HarmonyOS version 6.0.0. Devices running this build should be considered at risk until the issue is remedied.

The CVSS score of 5.9 indicates moderate severity. The EPSS score of less than 1% suggests that the chance of exploitation in the wild is low. HarmonyOS is not listed in the CISA KEV catalog. Exploitation would require the attacker to invoke the vulnerable scanning routine, which is likely to be executed locally by a user or a background service; no remote or network‑based attack vector is reported.