Technical impact
The vulnerability disclosed is a use‑after‑free condition located in the communication module of Huawei HarmonyOS. Successful exploitation may result in the loss of availability for the affected module or service. The weakness is identified as a race‑condition error (CWE‑362).
Affected Systems
Huawei HarmonyOS devices such as consumer phones, smart wearables, and other embedded systems running the HarmonyOS operating system are affected. The advisory does not list any specific product versions.
Risk and Exploitability
The CVSS score of 4.1 indicates a low to moderate risk with respect to availability impact. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. The exact attack vector is not specified; however, a use‑after‑free in a low‑level communication component generally requires either local input or the ability to send crafted messages to the device. Because no public exploit is documented, the current threat level is considered low, but monitoring for new developments remains prudent.
