Huawei HarmonyOS kernel module out-of-bounds read vulnerability

Huawei HarmonyOS is an operating system from Huawei (China), Inc. providing a microkernel-based, full-scenario distributed operating system. Huawei HarmonyOS provides a microkernel-based, full-scenario distributed operating system. Huawei HarmonyOS suffers from an out-of-bounds read vulnerability, which stems from the lack of proper validation of user-supplied data by the kernel module, where specially crafted data could trigger a read beyond the end of the allocated buffer. An attacker could exploit the vulnerability to cause a memory out-of-bounds.