This vulnerability is a permission bypass in the HarmonyOS card module. It permits an attacker to access card module functions that should be restricted, by circumventing the intended enforcement of least privilege. The direct result is a disruption of card module operations that can render related services unavailable, impacting the availability of the device’s core functionality.

The affected product is Huawei HarmonyOS. Version information is not provided in the available data.

The CVSS score of 6.6 indicates a moderate severity. The EPSS score of less than 1% reflects a low probability that the flaw will be actively exploited, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector is inferred to be an elevated privilege attempt, likely requiring local access to the device, as remote exploitation is not indicated. The exploit would involve manipulating permissions on the card module to cause a service disruption, resulting in availability impact.