An out‑of‑bounds write flaw has been found in the WEB module of Huawei HarmonyOS. The vulnerability allows an attacker to corrupt memory, potentially disrupting the operation of the device and exposing sensitive data. The impact manifests as a loss of availability, and the possibility of data leakage, consistent with the CWE‑120 classification for buffer overflows.

The flaw affects Huawei HarmonyOS devices. No specific version range is documented in the advisory, so all releases that include the vulnerable WEB module may be affected.

The CVSS score of 5.1 indicates a moderate risk level. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is via the web interface of the device; however, the exact remote or local conditions are not specified, so the exploitation requirement is inferred to require access to that module. Given the moderate score and absence of public exploits, the overall threat is manageable but warrants monitoring for potential public exploitation.