This vulnerability is a classic buffer overflow (CWE-120) caused by a buffer copy operation without checking the size of the input in the image codec module of Huawei HarmonyOS. Successful exploitation can lead to an out-of-bounds read, potentially affecting the confidentiality of services running on the affected version 6.1.0 of HarmonyOS. The CVSS 3.1 base score is 5.1, indicating a medium severity with local attack vector, low complexity, no privileges required, no user interaction, unchanged scope, limited confidentiality impact, no integrity impact, and low availability impact. No known exploits are reported in the wild, and no vendor-provided patch or remediation guidance is currently available.

Exploitation of this vulnerability may lead to unauthorized disclosure of information (confidentiality impact) and partial disruption of service availability. There is no indication of integrity compromise. The impact is limited to affected HarmonyOS version 6.1.0.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, users of HarmonyOS 6.1.0 should monitor Huawei's security advisories for updates. Until a patch is available, limiting local access to trusted users and minimizing exposure of the affected image codec functionality may reduce risk.