Impact
A buffer overflow in the IMS module allows an attacker to write data beyond the intended memory boundaries, potentially disrupting system operation. The flaw is identified as an out-of-bounds write and is linked to integer overflow weaknesses. Successful exploitation may lead to service interruption or loss of system availability.
Affected Systems
Huawei EMUI versions 14.0.0, 14.2.0, and 15.0.0 and Huawei HarmonyOS versions 4.0.0, 4.2.0, 4.3.0, 4.3.1, 5.1.0, and 6.0.0 are affected. The vulnerability is present in the IMS module across all listed firmware builds, with no documented fix or patch in the provided data.
Risk and Exploitability
The CVSS score of 6.5 indicates a moderate severity level. The EPSS score of less than 1% suggests a low probability of exploitation at present, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is not explicitly stated, but the impact on availability implies that localized execution or interaction with vulnerable services could be sufficient to trigger the flaw, making it a concern for devices running the impacted operating systems.
OpenCVE Enrichment