Impact
A faulty integer operation in the log service allows an attacker to trigger a Denial of Service by sending crafted input that overflows an internal counter. The flaw is identified as CWE‑190, indicating an integer overflow weakness. The impact is loss of availability for the affected device or operating system, since the log service can be stopped or destabilized. The vulnerability affects Huawei EMUI and Huawei HarmonyOS systems. No specific version ranges are provided, so any installation of these operating systems that includes the vulnerable log service may be at risk. The CVSS score of 5.0 reflects a moderate risk rating. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Because the description does not specify required access or network requirements, the likely attack vector is inferred to be a local or remote request to the log service, potentially achievable by a user with the ability to influence log input or by an application with elevated privileges.
Affected Systems
Huawei EMUI and Huawei HarmonyOS are impacted. No specific version ranges are listed, meaning all installations that contain the vulnerable log service could be at risk.
Risk and Exploitability
The CVSS score of 5.0 indicates moderate severity. EPSS is unavailable and the vulnerability is not listed in CISA KEV. The description lacks explicit attack vector details; we infer that an attacker can trigger the overflow by supplying crafted input to the log service, which could be performed locally or remotely if the service is exposed, especially by users or applications that can influence log content.
OpenCVE Enrichment