A permission control flaw, identified as CWE-200, exists in the call processing components of Huawei EMUI and HarmonyOS. The vulnerability allows a user or a compromised application to invoke call functions without following proper authorization checks, which could disrupt or interrupt the normal call workflow and therefore degrade the overall availability of communication services.

All devices running Huawei EMUI or HarmonyOS may be affected. No specific version ranges are documented, so every installation of these operating systems should be considered potentially vulnerable.

The CVSS score of 5.8 indicates moderate severity, with no EPSS data and the vulnerability not listed in the CISA KEV catalog. The attack vector is not explicitly stated in the CVE, but the nature of a permission control flaw suggests that an attacker may need local access or a suitable remote entry point to trigger the vulnerable call pathway. Successful exploitation could lead to a denial of service scenario for call functionality.