The vulnerability is a permission‑control flaw in the call handling logic of Huawei’s EMUI user interface and HarmonyOS operating system. Because the flaw allows access to call functions without proper authorization, an attacker who can influence call initiation may cause the system to become unavailable. The description explicitly states that successful exploitation may affect availability, indicating that the primary consequence is denial of service rather than compromise of confidentiality or integrity.

Affected systems include Huawei products running the EMUI interface and HarmonyOS operating system. Version details are not specified in the advisory, so the flaw may apply to multiple revisions of both platforms.

The severity of the flaw is moderate, reflected in a CVSS score of 5.9. EPSS data is missing and the vulnerability is not currently listed in CISA’s KEV catalog, suggesting no widespread public exploitation. Based on the description, the likely attack vector is local or requires the ability to craft malicious call requests, and its exploitation could result in device unavailability. While the lack of a documented exploit and moderate CVSS indicate a limited threat, administrators should remain vigilant until a vendor patch is released.