An out‑of‑bounds write in the HarmonyOS Inter‑Process Communication (IPC) module can corrupt memory, potentially leading to crashes or unexpected device behavior. The vulnerability is classified as a heap corruption flaw (CWE‑122) and is reported to impact system availability by causing loss of service or functionality. No evidence of privilege escalation or data exposure is given, so the primary concern is the interruption of normal operation.

The affected product is Huawei HarmonyOS. The advisory does not specify particular OS releases, implying that all HarmonyOS installations that include the IPC module are potentially vulnerable until a patch is applied or the IPC functionality is otherwise mitigated.

The CVSS base score of 5.3 indicates moderate severity. Because an EPSS score is unavailable and the vulnerability is not listed in CISA's KEV catalog, the exploitation likelihood is not quantifiable but is not considered negligible. The attack vector is not explicitly described, but the IPC context suggests that exploitation could involve use of inter‑process communication channels, which may be local, remote, or both. This inference is noted but is not confirmed by the source.