A high-severity race condition vulnerability in the Huawei HarmonyOS card framework poses a significant risk to system integrity and availability for users of version 6.0.0.

This vulnerability is a concurrent execution flaw, specifically a race condition (CWE-362), located in the card framework module. It allows an unauthenticated local attacker to trigger improper synchronization, potentially leading to unauthorized integrity changes or service disruption.

The vulnerability carries a CVSS score of 8.0, indicating a high level of risk to affected systems. Successful exploitation could result in the compromise of system integrity and denial of service, potentially leading to operational downtime or unauthorized modification of local data.

Immediate Action: Monitor official Huawei security bulletins for the release of a security patch and apply it to all affected devices immediately upon availability.

Proactive Monitoring: Review system logs for signs of anomalous process behavior or unexpected crashes associated with the card framework module.

Compensating Controls: Ensure that device access is strictly controlled and limit the installation of untrusted third-party applications that may interact with the card framework.

Public Exploit Available: Unknown

Given the high CVSS score, this vulnerability represents a significant risk to the stability and security of Huawei HarmonyOS environments. Administrators should prioritize tracking the vendor advisories provided in the references section and deploy firmware updates as soon as they are made available by Huawei to mitigate the risk of local exploitation.