This vulnerability (CVE-2026-58552) in Huawei HarmonyOS 6.1.0 is a classic buffer overflow (CWE-120) caused by an out-of-bounds read in the image codec module. The flaw arises from copying data without verifying the input size, which can result in reading memory beyond the intended buffer boundaries. According to the CVSS 3.1 vector (5.1, AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L), the attack requires local access with low complexity and no privileges or user interaction. The impact is limited to confidentiality loss and partial availability degradation. No vendor advisory or patch information is currently available, and no known exploits have been reported in the wild.

Exploitation of this vulnerability can lead to unauthorized disclosure of information (confidentiality impact) and partial disruption of service availability. The attack requires local access and low attack complexity, with no privileges or user interaction needed. Integrity is not affected. There are no reports of active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users and monitor for unusual activity related to the image codec module. Avoid processing untrusted image data locally.