Huawei HarmonyOS contains a permission control flaw in the contacts component. The flaw can be abused to impair the availability of the contacts feature, potentially causing denial of service or an interruption in access to stored contact information. The weakness is identified as CWE-840, reflecting improper privilege use or access scope.

The vulnerability affects Huawei HarmonyOS devices at the operating system level. No specific version range is provided, so all current HarmonyOS releases at the time of disclosure should be considered potentially exposed.

The CVSS score of 5.9 indicates a moderate severity assessment. EPSS data is not available, and the issue is not listed in KEV, suggesting no current mass exploitation. The likely attack surface appears local or requires interaction with the contacts application; the exact vector is not specified in the data, so this inference is based on the nature of the defect.