This vulnerability is a stack buffer overflow that allows local users to crash Faleemi Plus by providing specially crafted, oversized input strings. The overflow occurs when a user enters a 2000‑byte payload into the Camera name or DID number fields during camera addition, causing the application to terminate unexpectedly. The weakness is a classic memory corruption flaw (CWE‑120) and the impact is a denial of service that can be leveraged to disrupt individual camera management sessions or, in a broader deployment, to bring the entire application down.

The affected product is Faleemi Plus version 1.0.2, as distributed by the vendor faleemi. No other vendors or product versions are listed in the CNA data.

The CVSS score of 6.9 indicates moderate severity, reflecting that the flaw is exploitable only by local users with the ability to input data into the application. The EPSS score of less than 1% suggests a low likelihood of exploitation in the wild, and the vulnerability is not currently listed in CISA’s KEV catalog. Because the description specifies only local privilege requirements, the attack vector is inferred to be through the user interface of the application. While no patch or fix is listed in the data, the vulnerability remains accessible until a newer version or vendor patch is released.