This vulnerability involves an out-of-bounds write in the inter-process communication (IPC) module of Huawei HarmonyOS, classified as CWE-122 (heap-based buffer overflow). It affects multiple versions of the operating system (5.1.0, 6.0.0, and 6.1.0). The CVSS v3.1 base score is 5.3, indicating medium severity, with attack vector local, low attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. The vulnerability could allow an attacker with local access and limited privileges to cause a denial of service or other availability impact through memory corruption.

The primary impact is on availability due to the heap-based buffer overflow in the IPC module. Exploitation could lead to system instability or crashes. Confidentiality and integrity impacts are rated low, indicating limited potential for data exposure or modification. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation level is provided, users should monitor Huawei's security advisories for updates. Until a patch is available, restricting local access and limiting privileges may reduce risk.