A permission control vulnerability exists in the app management module of Huawei EMUI and HarmonyOS, allowing an attacker to influence the availability of device services. The flaw, identified as CWE‑264, indicates improper privilege management, which could potentially let a malicious actor perform unauthorized changes that disrupt normal operation.

Affected systems include Huawei EMUI operating systems and Huawei HarmonyOS. No specific firmware or hardware versions are listed in the advisory.

The CVSS score of 6.2 classifies the risk as moderate. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed high‑profile exploits yet. The attack vector is inferred to be local or application‑level, requiring elevated or mis‑used permissions to affect availability. The overall risk remains moderate but warrants timely remediation.