The vulnerability is an information leak within the Honor E application that can compromise service confidentiality. It allows an attacker to read sensitive data from the application, potentially exposing private user or system information. The weakness corresponds to CWE‑200: Information Exposure. Because the description provides no specific details about how the exploit is performed, it is inferred that the attack vector involves unauthorized reading or a configuration flaw that can be triggered by an adversary with application-level access.

Honor’s Honor E application, distributed by Honor. No specific version information is provided, so all releases of Honor E that have not yet applied a vendor update are considered affected.

The CVSS score of 6.3 indicates moderate severity, while the EPSS score of less than 1% suggests a very low yet non-zero probability of exploitation in the wild. The vulnerability is not listed in CISA KEV. Without explicit details on prerequisites or the attack path, it is presumed that an attacker who gains access to the application—either locally or via a remote network path—could exploit the information leak. The primary risk is confidentiality compromise.