Technical impact
A race condition was identified within the notification service component of HarmonyOS. When multiple notification events are processed concurrently, the internal synchronization logic can fail, resulting in the service becoming unstable or crashing. This effectively prevents users from receiving or handling notifications, leading to a service‑level denial of service.
Affected Systems
The affected vendor is Huawei, with the HarmonyOS platform. No version range is provided in the advisory, meaning any installation that includes the notification service may be vulnerable.
Risk and Exploitability
The CVSS assessment assigns a value of 1.9, indicating low severity. Because the exploit probability metric is not supplied and the vulnerability is not listed in the national KEV catalog, there is no evidence of active exploitation. The attack vector is inferred to be local—an attacker would need to provoke simultaneous notification events, possibly by installing a malicious application or by abusing the user interface to generate rapid notifications. Consequently, the threat is considered moderate, primarily due to the potential for repeated service interruptions rather than data compromise or widespread damage.
