The vulnerability is a permission control issue in the audio framework of Huawei EMUI and HarmonyOS. It enables an attacker to bypass normal access restrictions and gain unauthorized exposure to audio service data, potentially compromising confidential information. The weakness is classified as CWE-275, indicating that insufficient protection of restricted information can be accessed, leading to confidentiality risk. The CVE description confirms that successful exploitation may affect service confidentiality.

All devices running Huawei EMUI and Huawei HarmonyOS that include the vulnerable audio framework are potential targets. The CNA lists these two product families, but no specific version range is stated, so any version containing the affected framework is likely impacted.

The CVSS score of 6.6 indicates moderate severity. EPSS data is unavailable, and the flaw is not listed in the CISA KEV catalog, so the likelihood of exploitation remains uncertain. The attack vector is not explicitly detailed in the CVE data; it is inferred that the vulnerability may be exploitable through a malicious application or local privilege escalation that can call the audio service without proper permission checks. Due to the lack of publicly known exploits, the immediate risk is primarily theoretical, but the confidentiality impact underscores the need to address the flaw proactively.