Huawei HarmonyOS Deserialization Vulnerability in the Ability Module Affecting Availability

A deserialization vulnerability has been identified in the ability module of Huawei's HarmonyOS. This vulnerability arises from the improper handling of untrusted data, which could be exploited to disrupt the normal functioning of the service. The issue is present in HarmonyOS versions 5.1.0 and 5.0.1.

Impact

Exploitation of this vulnerability can lead to availability issues, causing disruptions in the normal operation of the affected service.

Remediation

Users can refer to the Huawei August 2025 Security Bulletin for guidance on applying the latest security updates, which address this vulnerability.