InfraRecorder 0.53 allows a local attacker to cause a denial of service by importing a specially crafted text file. The attacker creates a file containing 6000 bytes and imports it through the Edit menu's Import function, which triggers the application to crash. This is a classic example of CWE-789, an unchecked input for buffer or output size limitation, leading to an overflow that terminates the application.

The vulnerability affects users running InfraRecorder version 0.53 on any platform supported by the application. The only affected component is the file import functionality exposed in the Edit menu.

The vulnerability carries a CVSS score of 6.9, indicating moderate severity, and an EPSS score of less than 1%, meaning it is unlikely to be actively exploited. It is not listed in the CISA KEV catalog. The attack vector is local; an attacker must have access to the user’s machine to craft and import the malicious file. Once executed, the crash causes a denial of service of the application only.