An out-of-bounds write vulnerability exists in the WEB module of Huawei HarmonyOS. Classified as a buffer overflow (CWE-122), it allows an attacker to overwrite memory beyond intended bounds, potentially leading to both availability loss and the disclosure of sensitive information.

All Huawei HarmonyOS devices that incorporate the WEB module are affected. The vendor does not enumerate specific firmware releases, implying that any deployed HarmonyOS version containing this component may be vulnerable.

EPSS data is not available and the vulnerability is not listed in the KEV catalog, underscoring the lack of publicly known exploitation. The CVSS base score of 10.0 reflects an extreme severity. The description does not specify the attack vector; however, it is inferred that an attacker could exploit the flaw by sending crafted input to the WEB module over its network interface, which could result in a denial of service or confidentiality breach. Until a vendor patch is issued, the risk remains significant.