Huawei HarmonyOS 5.0.0 3D Engine Module glTF Model Loading Input Validation Vulnerability

Vulnerability

A vulnerability exists in the 3D engine module of Huawei HarmonyOS 5.0.0, where input parameters are not properly validated during the loading of glTF models. This lack of validation could be exploited, potentially leading to issues with the availability of the service.

Impact

Exploitation of this vulnerability may disrupt the availability of the service.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
0.6
exploitability
4.7
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.