Impact
The vulnerability is an out-of-bounds write in the distributed file system module, allowing an attacker to corrupt memory and potentially trigger system instability or crashes. The primary consequence is a loss of availability, as the affected system could become unusable without recovery. The weakness is identified as CWE-787, which is an uncontrolled write that can result in data corruption or denial of service.
Affected Systems
The flaw affects Huawei EMUI and Huawei HarmonyOS devices. No specific version information is provided, so all current releases of these operating systems remain potential targets until a patch is applied.
Risk and Exploitability
With a CVSS score of 6.8, the vulnerability is considered moderate but carries a meaningful chance of causing service disruption. The EPSS score is not available, so the exploitation probability is uncertain. It is not listed in the CISA KEV catalog, suggesting no publicly known exploits at the time of reporting. Based on the description, the attack likely requires local access or privileged interaction with the distributed file system module; additional details are not disclosed.
OpenCVE Enrichment