This vulnerability in Huawei HarmonyOS kernel module arises from improper input validation leading to an out-of-bounds write condition. Successful exploitation can compromise system availability and confidentiality. The affected versions include 4.0.0 through 6.0.0. The CVSS score of 5.7 reflects a medium severity with attack vector local, high attack complexity, requiring high privileges, no user interaction, unchanged scope, high confidentiality impact, no integrity impact, and high availability impact. No vendor advisory or patch information is currently provided.

If exploited, this vulnerability can cause denial of service (availability impact) and unauthorized disclosure of information (confidentiality impact) on affected HarmonyOS devices. There is no indication of integrity impact. The attack requires local access with high privileges and has high complexity, reducing the likelihood of widespread exploitation. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users with high privileges and monitor for unusual kernel activity. Avoid deploying affected versions in sensitive environments if possible.