The vulnerability exists in Valentina Studio 9.0.4 and is triggered when a user supplies an excessively long string to the Host field during a server connection attempt. The 256‑byte buffer of repeated characters causes the application to crash, resulting in a loss of availability for local users. This weakness is defined by CWE‑466, indicating an out‑of‑bounds buffer write due to improper bounds checking.

Valentina Studio version 9.0.4 from Valentina‑Db is affected. No additional affected versions are listed in the CVE data.

The CVSS base score is 6.9, indicating moderate severity. The EPSS score is not provided and the vulnerability is not listed in the CISA KEV catalog, implying no publicly known exploits. The attack requires local access and manual input of a 256‑byte payload, so the risk is limited to local users. Nevertheless, an attacker who can provide the malicious input can repeatedly crash the application, causing a denial of service to legitimate users.