This vulnerability involves a use-after-free condition in the package management module of Huawei HarmonyOS 6.1.0, categorized as improper access control (CWE-284). The CVSS vector indicates that the attack requires local access with high privileges and no user interaction, and it can affect confidentiality, integrity, and availability to a limited extent. The vulnerability could allow an attacker with high privileges on the device to compromise service integrity. No patch or official remediation guidance has been published by Huawei yet.

Exploitation of this vulnerability may lead to compromised service integrity on affected HarmonyOS devices. The CVSS score reflects limited confidentiality and integrity impact but a high impact on availability. Since the attack vector is local and requires high privileges, the risk is mitigated by the need for prior access and elevated permissions. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published by Huawei, users should monitor Huawei's security advisories for updates. Restricting local access and limiting high privilege accounts may reduce exposure until a patch is available.