The vulnerability is a buffer overflow in HeidiSQL 9.5.0.5196 that occurs when a local user supplies an excessively long file path in the SQL log file path field of the Preferences → Logging dialog. This input overflows an internal buffer, causing the application to crash. The impact is a denial of service for the user; an attacker with local access can repeatedly trigger the crash, disrupting normal database‑management operations. The weakness is identified as CWE‑98.

The vulnerable product is HeidiSQL client release 9.5.0.5196. Any workstation running this specific build is susceptible. No other HeidiSQL versions are listed as affected, and the flaw does not appear to impact different releases.

The CVSS score of 6.9 indicates medium severity, while the EPSS score of less than 1% suggests a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, implying no known widespread exploitation. An attacker must have local access to manipulate the logging preferences; remote exploitation is not feasible. Nevertheless, the crash can be disruptive and the flaw should be mitigated promptly.