An out-of-bounds read vulnerability in the Huawei HarmonyOS runtime interpreter module poses a significant risk to system availability.

This vulnerability is an out-of-bounds read (CWE-125) occurring within the runtime interpreter module. The vulnerability can be triggered by an unauthenticated local attacker, as indicated by the CVSS vector AV:L/PR:N/UI:N.

Successful exploitation of this flaw may lead to a loss of system availability, potentially disrupting critical services hosted on the device. While the CVSS score of 8.4 reflects a high severity level due to the potential for total impact on availability, the local attack vector limits the immediate exposure compared to remote-code execution flaws.

Immediate Action: Review the official Huawei security bulletin at the provided reference and apply all available system updates for HarmonyOS devices.

Proactive Monitoring: Security teams should monitor system logs for unusual process crashes or anomalous behavior within the runtime interpreter.

Compensating Controls: Ensure device physical access controls are strictly enforced to mitigate the risk posed by the local attack vector.

Public Exploit Available: Unknown.

Given the high CVSS score, organizations deploying Huawei HarmonyOS 5.1.0 or 5.0.1 must prioritize the application of security patches as soon as they are made available by the vendor. Maintain a rigorous update schedule to ensure that system-level vulnerabilities are remediated in a timely manner.