AnyBurn 4.3 has a local buffer overflow in the image file name field of the 'Copy disk to Image' operation. The flaw allows a local attacker to supply an excessively long string – e.g., a 10000-byte payload – that overflows a buffer and causes the application to crash. This leads to a denial of service and is classified as CWE-787.

The affected product is AnyBurn version 4.3 from AnyBurn. No other versions are listed as vulnerable.

The CVSS score is 6.9 and the EPSS probability is below 1%. The vulnerability is not listed in the CISA KEV catalog, suggesting limited known exploitation. A local attacker who can control the Image file name field can exploit the buffer overflow by executing the operation within the program. The impact is confined to the application, but repeated crashes may affect availability of the user's media processing workflow.