The vulnerability is a classic buffer overflow (CWE-120) in CrossFont 7.5 that allows a local attacker to crash the application by submitting an oversized payload in the License Key field. When the malicious data is processed, the application fails and terminates, resulting in an unavailability of the font management service for legitimate users.

Acutesystems CrossFont version 7.5 is affected. No additional affected versions are listed in the data.

The CVSS score of 6.9 classifies the flaw as moderate severity. The EPSS score of less than 1% indicates a low probability of exploitation, and the vulnerability is not included in the CISA KEV catalog. Based on the description, it is inferred that exploitation requires local system access or a trusted user providing malicious data, which limits the attack window. Nonetheless, once executed the application ceases to function until restarted or patched.