Huawei HarmonyOS 3D Engine Module glTF Model Loading Input Validation Vulnerability

A vulnerability exists in the 3D engine module of Huawei HarmonyOS devices, specifically in versions through 5.0.0. This vulnerability arises because input parameters are not properly validated during the loading of glTF models. As a result, successful exploitation of this issue could disrupt the availability of the service.

Impact

Exploitation of this vulnerability may lead to a denial-of-service condition, causing the application or service to become unavailable or unresponsive.

Remediation

Users can refer to the January 2025 Huawei Security Bulletin for guidance on applying the available patch.