This vulnerability, identified as CWE-835, involves a loop in the media platform of Huawei HarmonyOS 6.0.0 that lacks a reachable exit condition, resulting in an infinite loop and causing a stack overflow. The CVSS 3.1 base score is 6.1, reflecting a medium severity with local attack vector, low attack complexity, requiring low privileges and user interaction, and impacts confidentiality, integrity, and primarily availability. The vulnerability could lead to denial of service conditions due to resource exhaustion. No patch or official remediation level has been disclosed by Huawei as of the publication date.

Exploitation of this vulnerability may cause the affected device to become unavailable due to a stack overflow triggered by an infinite loop in the media platform. The impact is primarily on availability, with limited confidentiality and integrity impact. There are no known exploits in the wild, and the attack requires local access with user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users and avoid untrusted media inputs that may trigger the vulnerability. Monitor Huawei's security advisories for updates on patches or mitigations.