An oversized input submitted through the application’s search field causes the program to crash, resulting in a denial of service. The flaw is a missing authentication weakness, as attackers can trigger the crash without any credentials. By entering a large buffer of repeated characters into the search bar, an attacker can immediately bring the application down.

The affected product is the Wikipedia application, specifically version 12.0. No other vulnerable versions are listed in the CNA data.

The CVSS score of 8.7 signals high severity, and the lack of a KEV listing implies no confirmed active exploitation. Attackers need only interact with the search interface; no special privileges or network access are required. Because the vulnerability causes a crash, it results in an immediate loss of availability for the affected instance. The EPSS score is unavailable, so the precise likelihood of exploitation cannot be quantified, but the high severity and absence of mitigation suggest that the risk remains substantial.