Valentina Studio 9.0.4 contains a local denial of service vulnerability caused by a buffer overflow in the Host field when establishing a server connection. An attacker who can enter a 256‑byte string of repeated characters can force the application to crash, disrupting availability. This weakness is identified as CWE‑466: Buffer Overflow.

The flaw affects the Valentina-Db suite’s Valentina Studio, specifically version 9.0.4. The issue is local, requiring an attacker to have access to the user’s desktop or a compromised session to supply the malicious Host value.

The CVSS score of 6.9 indicates medium severity for a local two‑party attacker. The EPSS score of less than 1% suggests a very low likelihood of exploitation in the wild. Valentina Studio is not listed in the CISA KEV catalog, and the attack vector is inferred to be local, as it requires direct interaction with the application.