A permission control flaw exists in Huawei's EMUI and HarmonyOS service notification component, allowing an attacker to bypass normal access checks and potentially disrupt the notification delivery process, which can lead to availability degradation. This weakness is described as CWE‑264, reflecting improper permission management. The vulnerability description states that exploitation may adversely affect system availability, but does not detail confidentiality or integrity impacts.

The flaw targets Huawei's EMUI operating system and HarmonyOS. No specific version numbers are disclosed in the advisory, so administrators should consult Huawei's 2026 June bulletin for precise affected releases.

The CVSS score of 3.6 reflects a moderate severity, while the EPSS score is unavailable, leaving the likelihood of exploitation uncertain; the vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector likely involves unauthorized use of the notification service, though the exact prerequisites for exploitation are not provided. The impact is primarily on availability of the notification subsystem, which could degrade user experience or impede critical alerts.