A race condition exists within the HarmonyOS IPC module that can lead to a use‑after‑free exploit. When concurrently accessed objects are freed while another process accesses them, the attacker may cause the system to crash or become unresponsive, thereby affecting the availability of the affected device.

The vulnerability affects Huawei HarmonyOS systems. No specific firmware or hardware version information is provided, so any device running an unpatched HarmonyOS with this IPC implementation is potentially impacted.

The CVSS score of 6.4 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, but the potential impact remains. Based on the description, the likely attack vector involves sending crafted IPC messages from a compromised or malicious local process or, if IPC is exposed over a network, from a remote attacker. The exploit requires conditions that trigger the race between allocation and deallocation of shared memory, and successful exploitation would result in a denial of service to the affected device.