The vulnerability is a stack overflow in the media platform component of Huawei HarmonyOS, classified as CWE‑835. An attacker who can provide malicious media content may overflow the stack, corrupt control data, and crash the media service. This results in a denial of service that disrupts system availability but does not grant arbitrary code execution or data disclosure.

The affected systems are all Huawei devices running HarmonyOS that include the media platform. Because no specific firmware or software version is supplied, every HarmonyOS installation is potentially vulnerable until an update is applied.

The CVSS score of 6.1 indicates moderate severity. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, suggesting a low to moderate likelihood of widespread exploitation. The attack vector is inferred to involve delivery of malicious media locally or through network channels, but explicit details are not provided in the description.