This vulnerability (CVE-2026-58559) in Huawei Harmony OS arises from improper handling of memory allocation requests with excessively large size values in the vibration service. Exploiting this flaw can cause a denial-of-service condition by impacting system availability. The vulnerability affects versions 4.0.0, 4.2.0, 4.3.0, and 4.3.1 of Harmony OS. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, and high impact on availability. There is no vendor advisory or patch information available, and no known exploits in the wild have been reported.

Successful exploitation may cause denial of service by exhausting system resources due to excessive memory allocation requests in the vibration service, leading to reduced availability of the affected device or system. There is no reported impact on confidentiality or integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor for updates from Huawei regarding this vulnerability. No specific mitigations or workarounds are provided in the available data.