CVE-2024-58114 — Allocation of Resources Without Limits or Throttling in Huawei Harmonyos

CWE-770 — Allocation of Resources Without Limits or Throttling3 documents3 sources

Severity

4.0MEDIUMNVD

EPSS

0.1%

top 82.43%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Harmonyos

Timeline

PublishedJun 6

Description

Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 2.5 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5huawei/harmonyos5.0.0

▶NVDhuawei/harmonyos5.0.0

🔴Vulnerability Details

CVEList

CVE-2024-58114: Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability↗2025-06-06

▶

GHSA

GHSA-fc3h-cc99-762g: Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability↗2025-06-06

▶