Technical impact
The flaw is a use‑after‑free (CWE‑362) located in the communication module of Huawei HarmonyOS. When an attacker can trigger the fault, the system may crash or otherwise stop responding, resulting in a denial of service. The vendor specifically notes that successful exploitation may affect availability, indicating that the primary consequence is interruption rather than data compromise.
Affected Systems
Huawei HarmonyOS is the known affected product family. No specific version numbers are listed in the advisory, so any device or application running an unspecified HarmonyOS build could be vulnerable.
Risk and Exploitability
The CVSS base score of 4.7 reflects moderate severity, and the vulnerability is not listed in the CISA KEV catalog. EPSS data is not available, so the exact likelihood of exploitation is indeterminate. Based on the description, it is inferred that the attack vector could be local if the communication module is exposed through a user‑controlled interface, or remote if the module is reachable over a network. The risk is moderate, but the impact on availability can be significant, especially for critical services.
