An improper access control defect has been identified in HarmonyOS’s memo module, allowing an attacker to bypass normal permissions and read or modify memo data that should be restricted. The vulnerability can lead to the disclosure of private information and to disruption of the memo feature, thereby impacting both confidentiality and availability for affected devices.

The defect affects devices running Huawei HarmonyOS. No specific version ranges are disclosed in the current advisory; however, any HarmonyOS installation containing the memo module is potentially susceptible.

The issue carries a CVSS base score of 4.1, indicating moderate risk. The exploit probability (EPSS) is not reported, and the vulnerability is not listed in CISA’s KEV catalog, suggesting limited widespread exploitation. Attack vectors are not detailed in the advisory; it is inferred that local or network-based access may be required to exploit the memo module, though definitive conditions are not provided.