Technical impact
The vulnerability is a permission control flaw in Huawei's Bluetooth module, potentially allowing an attacker to perform actions beyond authorized permissions. The likely impact includes potential disruption to Bluetooth services, which could affect device availability. The weakness is mapped to CWE‑264, which addresses authority control.
Affected Systems
Affected products include Huawei EMUI and Huawei Harmony OS. No specific version numbers are provided, so any device running these operating systems may be vulnerable until an update is released.
Risk and Exploitability
The CVSS score is 5.1, indicating moderate risk. The EPSS score is <1%, implying exploitation is unlikely at this time. It is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attack vector requires Bluetooth connectivity and is likely local, limiting the potential attacker to devices in close proximity. Because the impact is limited to availability, a patch or mitigation can be applied without an immediate emergency.
